A company is developing a two-tier web application on AWS. The company's developers have deployed the application on an Amazon EC2 instance that connects directly to a backend Amazon RDS database. The company must not hardcode database credentials in the application. The company must also implement a solution to automatically rotate the database credentials on a regular basis.
Which solution will meet these requirements with the LEAST operational overhead?

• A.Store the database credentials in the instance metadata. Use Amazon EventBridge (Amazon CloudWatch Events) rules to run a scheduled AWS Lambda function that updates the RDS credentials and instance metadata at the same time.
• B.Store the database credentials in a configuration file in an encrypted Amazon S3 bucket. Use Amazon EventBridge (Amazon CloudWatch Events) rules to run a scheduled AWS Lambda function that updates the RDS credentials and the credentials in the configuration file at the same time. Use S3 Versioning to ensure the ability to fall back to previous values.
• C.Store the database credentials as a secret in AWS Secrets Manager. Turn on automatic rotation for the secret. Attach the required permission to the EC2 role to grant access to the secret.
• D.Store the database credentials as encrypted parameters in AWS Systems Manager Parameter Store. Turn on automatic rotation for the encrypted parameters. Attach the required permission to the EC2 role to grant access to the encrypted parameters.

Comment: *

Name: *

Email: *

Verification: *

[Design High-Performing Architectures]
A company is running a popular social media website. The website gives users the ability to upload images to share with other users. The company wants to make sure that the images do not contain inappropriate content. The company needs a solution that minimizes development effort.
What should a solutions architect do to meet these requirements?

• A.Use Amazon Comprehend to detect inappropriate content. Use human review for low-confidence predictions.
• B.Use Amazon Rekognition to detect inappropriate content. Use human review for low-confidence predictions.
• C.Use Amazon SageMaker to detect inappropriate content. Use ground truth to label low-confidence predictions.
• D.Use AWS Fargate to deploy a custom machine learning model to detect inappropriate content. Use ground truth to label low-confidence predictions.

Comment: *

Name: *

Email: *

Verification: *

A company recently migrated its web application to AWS by rehosting the application on Amazon EC2 instances in a single AWS Region. The company wants to redesign its application architecture to be highly available and fault tolerant. Traffic must reach all running EC2 instances randomly.
Which combination of steps should the company take to meet these requirements? (Choose two.)

• A.Create an Amazon Route 53 failover routing policy.
• B.Create an Amazon Route 53 weighted routing policy.
• C.Create an Amazon Route 53 multivalue answer routing policy.
• D.Launch three EC2 instances: two instances in one Availability Zone and one instance in another Availability Zone.
• E.Launch four EC2 instances: two instances in one Availability Zone and two instances in another Availability Zone.

Comment: *

Name: *

Email: *

Verification: *

A group requires permissions to list an Amazon S3 bucket and delete objects from that bucket An administrator has created the following IAM policy to provide access to the bucket and applied that policy to the group. The group is not able to delete objects in the bucket. The company follows least-privilege access rules.

• A.
• B.
• C.
• D.

Comment: *

Name: *

Email: *

Verification: *

A company uses Amazon S3 to store customer data that contains personally identifiable information (PII) attributes. The company needs to make the customer information available to company resources through an AWS Glue Catalog. The company needs to have fine-grained access control for the data so that only specific IAM roles can access the PII data.

• A.Create one IAM policy that grants access to PII. Create a second IAM policy that grants access to non- PII data. Assign the PII policy to the specified IAM roles.
• B.Create one IAM role that grants access to PII. Create a second IAM role that grants access to non-PII data. Assign the PII policy to the specified IAM roles.
• C.Use AWS Lake Formation to provide the specified IAM roles access to the PII data.
• D.Use AWS Glue to create one view for PII data. Create a second view for non-PII data. Provide the specified IAM roles access to the PII view.

Comment: *

Name: *

Email: *

Verification: *