A company hosts an application on Amazon EC2 instances that run in a single Availability Zone. The application is accessible by using the transport layer of the Open Systems Interconnection (OSI) model. The company needs the application architecture to have high availability Which combination of steps will meet these requirements MOST cost-effectively? (Select TWO_)

• A.Configure new EC2 instances in a different AvailabiIity Zone. Use Amazon Route 53 to route traffic to all instances.
• B.Configure a Network Load Balancer in front of the EC2 instances.
• C.Configure a Network Load Balancer tor TCP traffic to the instances. Configure an Application Load Balancer tor HTTP and HTTPS traffic to the instances.
• D.Create an Auto Scaling group for the EC2 instances. Configure the Auto Scaling group to use multiple Availability Zones. Configure the Auto Scaling group to run application health checks on the instances_
• E.Create an Amazon CloudWatch alarm. Configure the alarm to restart EC2 instances that transition to a stopped state

Comment: *

Name: *

Email: *

Verification: *

A company creates operations data and stores the data in an Amazon S3 bucket for the company's annual audit, an external consultant needs to access an annual report that is stored in the S3 bucket. The external consultant needs to access the report for 7 days.
The company must implement a solution to allow the external consultant access to only the report.
Which solution will meet these requirements with the MOST operational efficiency?

• A.Create a new S3 bucket that is configured to host a public static website. Migrate the operations data to the new S3 bucket. Share the S3 website URL with the external consultant.
• B.Enable public access to the S3 bucket for 7 days. Remove access to the S3 bucket when the external consultant completes the audit.
• C.Create a new 1AM user that has access to the report in the S3 bucket. Provide the access keys to the external consultant. Revoke the access keys after 7 days.
• D.Generate a presigned URL that has the required access to the location of the report on the S3 bucket.Share the presigned URL with the external consultant.

Comment: *

Name: *

Email: *

Verification: *

A company needs to store contract documents. A contract lasts for 5 years. During the 5-year period, the company must ensure that the documents cannot be overwritten or deleted. The company needs to encrypt the documents at rest and rotate the encryption keys automatically every year.
Which combination of steps should a solutions architect take to meet these requirements with the LEAST operational overhead? (Select TWO.)

• A.Store the documents in Amazon S3. Use S3 Object Lock in governance mode.
• B.Store the documents in Amazon S3. Use S3 Object Lock in compliance mode.
• C.Use server-side encryption with Amazon S3 managed encryption keys (SSE-S3). Configure key rotation.
• D.Use server-side encryption with AWS Key Management Service (AWS KMS) customer managed keys. Configure key rotation.
• E.Use server-side encryption with AWS Key Management Service (AWS KMS) customer provided (imported) keys. Configure key rotation.

Comment: *

Name: *

Email: *

Verification: *

A company has NFS servers in an on-premises data center that need to periodically back up small amounts of data to Amazon S3. Which solution meets these requirements and is MOST cost-effective?

• A.Set up AWS Glue to copy the data from the on-premises servers to Amazon S3.
• B.Set up an AWS DataSync agent on the on-premises servers, and sync the data to Amazon S3.
• C.Set up an SFTP sync using AWS Transfer for SFTP to sync data from on premises to Amazon S3.
• D.Set up an AWS Direct Connect connection between the on-premises data center and a VPC, and copy the data to Amazon S3.

Comment: *

Name: *

Email: *

Verification: *

A company is designing a microservice-based architecture tor a new application on AWS. Each microservice will run on its own set of Amazon EC2 instances. Each microservice will need to interact with multiple AWS services such as Amazon S3 and Amazon Simple Queue Service (Amazon SQS).
The company wants to manage permissions for each EC2 instance based on the principle of least privilege.
Which solution will meet this requirement?

• A.Assign an 1AM user to each micro-service. Use access keys stored within the application code to authenticate AWS service requests.
• B.Create a single 1AM role that has permission to access all AWS services. Associate the 1AM role with all EC2 instances that run the microservices
• C.Use AWS Organizations to create a separate account for each microservice. Manage permissions at the account level.
• D.Create individual 1AM roles based on the specific needs of each microservice. Associate the 1AM roles with the appropriate EC2 instances.

Comment: *

Name: *

Email: *

Verification: *