A company is using AWS Key Management Service (AWS KMS) customer master keys (CMKs) to encrypt AWS Lambda environment variables A solutions architect needs to ensure that the required permissions are in place to decrypt and use the environment variables.
Which steps must the solutions architect take to implement the correct permissions? (Select TWO.)

• A.Allow the Lambda execution role in the AWS KMS key policy
• B.Add AWS KMS permissions in the Lambda function policy.
• C.Add AWS KMS permissions in the Lambda resource policy
• D.Add AWS KMS permissions in the Lambda execution role
• E.Allow the Lambda resource policy in the AWS KMS key policy.

Comment: *

Name: *

Email: *

Verification: *

A solution architect is designing he architect of a new application being deployed to the AWS Cloud. The application will run on Amazon EC2 On-Demand instances and will automatically scale across multiple Availability Zones. The EC2 instances will scale up and down frequently the day. An Application load balancer (ALB) will handle the load distribution. The architecture needs to support distributed session data management. The company is willing to make charges to code if needed.
What should the solutions architect do to ensure that the architecture supports distributed session data management?

• A.Use Session Manager from AWS Systems Manager to manage the session.
• B.Use session affinity (sticky sessions) of the ALB to manage session data.
• C.Use the GetSessionToken API operation in AWS Security Token Service (AWS STS) to manage the session.
• D.Use Amazon ElastiCache to manage and store session data.

Comment: *

Name: *

Email: *

Verification: *

A company has several Amazon EC2 instances set up m a private subnet for security reasons. These instances host applications that read and write large amounts of data to end from Amazon S3 regularly. Currently subnet routing directs all the traffic destined for the internet through a NAT gateway. The company wants to optimize the overall coat without impacting the ability of the application to communication Amazon S3 or the outside internet.
What should a solutions architect do to optimize costs?

• A.Create an AWS Lambda function outside of the VPC to handle S3 requests Attach an IAM policy to the EC2 instances, allowing them to invoke the Lambda function.
• B.Create an additional NAT gateway. Update the route table to route to the NAT gateway Update the network ACL lo allow S3 traffic
• C.Create an internet gateway Update the route table to route traffic to the internet gateway Update the network ACL to allow S3 traffic
• D.Create a VPC endpoint for Amazon S3 Attach an endpoint policy to the endpoint Update the route table lo direct traffic to the VPC endpoint.

Comment: *

Name: *

Email: *

Verification: *

A company has a web application that users access from around the world The company has web servers in multiple AWS Regions to support the traffic A solutions architect must configure an Amazon Route 53 routing policy to send traffic to only the active web servers Which configuration meets this requirement?

• A.Create a multivalue answer routing policy that uses health checks for each Region
• B.Create a simple routing policy that uses health checks for each Region
• C.Create a weighted routing policy with a health check weight of 100 for each Region
• D.Create a geoproximity routing policy with a health check bias of 99 for each Region

Comment: *

Name: *

Email: *

Verification: *

A company processes large amounts of dat
a. The output data is stored in Amazon S3 Standard storage in an S3 bucket, where it is analyzed for 1 month. The data must remain immediately accessible after the 1-month analysis period.
Which storage solution meets these requirements MOST cost-effectively?

• A.Configure an S3 Lifecycle policy to transition the objects to S3 One Zone-Infrequent Access (S3 One Zone-IA) after 30 days.
• B.Configure S3 Intelligent-Tiering to transition the objects to S3 Glacier after 30 days.
• C.Configure an S3 Lifecycle policy to transition the objects to S3 Glacier after 30 days.
• D.Configure an S3 Lifecycle policy to delete the objects after 30 days. Enable versioning on the S3 bucket so that deleted objects can still be immediately restored as needed.

Comment: *

Name: *

Email: *

Verification: *