What should a solutions architect do to ensure that all objects uploaded to an Amazon S3 bucket are encrypted?

• A.Update the bucket policy to deny if the PutObject does not have an s3 x-amz-acl header set
• B.Update the bucket policy to deny if the PutObject does not have an s3:x-amz-aci header set to private.
• C.Update the bucket policy to deny if the PutObject does not have an aws SecureTransport header set to true
• D.Update the bucket policy to deny if the PutObject does not have an x-amz-server-side-encryption header set.

Comment: *

Name: *

Email: *

Verification: *

A company wants to use Amazon Elastic Container Service (Amazon ECS) clusters and Amazon RDS DB instances to build and run a payment processing application. The company will run the application in its on-premises data center for compliance purposes.
A solutions architect wants to use AWS Outposts as part of the solution. The solutions architect is working with the company's operational team to build the application.
Which activities are the responsibility of the company's operational team? (Select THREE.)

• A.Providing resilient power and network connectivity to the Outposts racks
• B.Managing the virtualization hypervisor, storage systems, and the AWS services that run on Outposts
• C.Physical security and access controls of the data center environment
• D.Availability of the Outposts infrastructure including the power supplies, servers, and network-ing equipment within the Outposts racks
• E.Physical maintenance of Outposts components
• F.Providing extra capacity for Amazon ECS clusters to mitigate server failures and maintenance events

Comment: *

Name: *

Email: *

Verification: *

A company runs an application using Amazon ECS. The application creates esi/ed versions of an original image and then makes Amazon S3 API calls to store the resized images in Amazon S3.
How can a solutions architect ensure that the application has permission to access Amazon S3?

• A.Update the S3 role in AWS IAM to allow read/write access from Amazon ECS, and then relaunch the container.
• B.Create an IAM role with S3 permissions, and then specify that role as the taskRoleAm in the task definition.
• C.Create a security group that allows access from Amazon ECS to Amazon S3, and update the launch configuration used by the ECS cluster.
• D.Create an IAM user with S3 permissions, and then relaunch the Amazon EC2 instances for the ECS cluster while logged in as this account.

Comment: *

Name: *

Email: *

Verification: *

A company runs an Oracle database on premises. As part of the company's migration to AWS, the company wants to upgrade the database to the most recent available version. The company also wants to set up disaster recovery (DR) for the database. The company needs to minimize the operational overhead for normal operations and DR setup. The company also needs to maintain access to the database's underlying operating system.
Which solution will meet these requirements?

• A.Migrate the Oracle database to Amazon RDS Custom for Oracle. Create a read replica for the database in another AWS Region.
• B.Migrate the Oracle database to an Amazon EC2 instance. Set up database replication to a different AWS Region.
• C.Migrate the Oracle database to Amazon RDS for Oracle. Create a standby database in another Availability Zone.
• D.Migrate the Oracle database to Amazon RDS for Oracle. Activate Cross-Region automated backups to replicate the snapshots to another AWS Region.

Comment: *

Name: *

Email: *

Verification: *

A company is building an application in the AWS Cloud. The application will store data in Amazon S3 buckets in two AWS Regions. The company must use an AWS Key Management Service (AWS KMS) customer managed key to encrypt all data that is stored in the S3 buckets. The data in both S3 buckets must be encrypted and decrypted with the same KMS key. The data and the key must be stored in each of the two Regions.
Which solution will meet these requirements with the LEAST operational overhead?

• A.Create an S3 bucket in each Region Configure the S3 buckets to use server-side encryption with Amazon S3 managed encryption keys (SSE-S3) Configure replication between the S3 buckets.
• B.Create a customer managed multi-Region KMS key. Create an S3 bucket in each Region. Configure replication between the S3 buckets. Configure the application to use the KMS key with client-side encryption.
• C.Create a customer managed KMS key and an S3 bucket in each Region Configure the S3 buckets to use server-side encryption with Amazon S3 managed encryption keys (SSE-S3) Configure replication between the S3 buckets.
• D.Create a customer managed KMS key and an S3 bucket m each Region Configure the S3 buckets to use server-side encryption with AWS KMS keys (SSE-KMS) Configure replication between the S3 buckets.

Comment: *

Name: *

Email: *

Verification: *