What should a solutions architect do to ensure that all objects uploaded to an Amazon S3 bucket are encrypted?

• A.Update the bucket policy to deny if the PutObject does not have an s3:x-amz-acl header set to private.
• B.Update the bucket policy to deny if the PutObject does not have an x-amz-server-side-encryption header set.
• C.Update the bucket policy to deny if the PutObject does not have an aws:SecureTransport header set to true.
• D.Update the bucket policy to deny if the PutObject does not have an s3:x-amz-acl header set.

Comment: *

Name: *

Email: *

Verification: *

A company is running a database on Amazon Aurora The database is idle every evening An application that performs extensive reads on the database experiences performance issues during morning hours when user traffic spikes. During these peak penods. the application receives timeout errors when reading from the database The company does not have a dedicated operations team and needs an automated solution to address the performance issues
Which actions should a solutions architect take to automatically adjust to the increased read load on the database? (Select TWO )

• A.Migrate the database to Aurora Serverless
• B.Migrate the database to an Aurora multi-master cluster
• C.Configure Aurora Auto Scaling with Aurora Replicas.
• D.Migrate the database to an Amazon RDS for MySQL Multi-AZ deployment
• E.Increase the instance size of the Aurora database

Comment: *

Name: *

Email: *

Verification: *

A company has a two-tier application architecture that runs in public and private subnets Amazon EC2 instances running the web application are in the public subnet and a database runs on the private subnet The web application instances and the database are running in a single Availability Zone (AZ).
Which combination of steps should a solutions architect take to provide high availability for this architecture? (Select TWO.)

• A.Create new public and private subnets in the same AZ for high availability
• B.Create new public and private subnets in a new AZ Create a database using Amazon EC2 in one AZ
• C.Add the existing web application instances to an Auto Scaling group behind an Application Load Balancer
• D.Create an Amazon EC2 Auto Scaling group and Application Load Balancer spanning multiple AZs
• E.Create new public and private subnets in the same VPC each in a new AZ Migrate the database to an Amazon RDS multi-AZ deployment

Comment: *

Name: *

Email: *

Verification: *

A company serves content to its subscribers across the world using an application running on AWS.
The application has several Amazon EC2 instances in a private subnet behind an Application Load Balancer (ALB).
Due to a recent change in copyright restrictions the chief information officer (CIO) wants to block access for certain countries.
Which action will meet these requirements?

• A.Modify the ALB security group to deny incoming traffic from blocked countries
• B.Use Amazon CloudFront to serve the application and deny access to blocked countries
• C.Modify the security group for EC2 instances to deny incoming traffic from blocked countries
• D.Use ALB listener rules to return access denied responses to incoming traffic from blocked countries

Comment: *

Name: *

Email: *

Verification: *

A company is migrating Us applications to AWS Currently applications that run on premises generate hundreds of terabytes of data that is stored on a shared file system The company Is running an analytics application in the cloud that runs hourly to generate Insights from this data
The company needs a solution to handle the ongoing data transfer between the on-premises shared file system and Amazon S3 The solution also must be able to handle occasional interruptions m internet connectivity
Which solution should the company use for the data transfer to meet these requirements?

• A.AWS Transfer for SFTP
• B.AWS Migration Hub
• C.AWS Snowball Edge Storage Optimized
• D.AWS DataSync

Comment: *

Name: *

Email: *

Verification: *