A company wants to build a solution for its business-critical Amazon RDS for MySQL database. The database requires high availability across different geographic locations. A SysOps administrator must build a solution to handle a disaster recovery (DR) scenario with the lowest recovery time objective (RTO) and recovery point objective (RPO).
Which solution meets these requirements?

• A.Create a cross-Region read replica for the database.
• B.Schedule AWS Lambda functions to create snapshots of the source database and to copy the snapshots to a DR Region.
• C.Create automated snapshots of the database on a schedule. Copy the snapshots to the DR Region.
• D.Create a Multi-AZ read replica for the database.

Comment: *

Name: *

Email: *

Verification: *

A SysOps administrator is attempting to download patches from the internet into an instance in a private subnet. An internet gateway exists for the VPC, and a NAT gateway has been deployed on the public subnet; however, the instance has no internet connectivity. The resources deployed into the private subnet must be inaccessible directly from the public internet.

What should be added to the private subnet's route table in order to address this issue, given the information provided?

• A.10.0.1.0/24 IGW
• B.10.0.1.0/24 NAT
• C.0.0.0.0/0 NAT
• D.0.0.0.0/0 IGW

Comment: *

Name: *

Email: *

Verification: *

A company asks a SysOps administrator to ensure that AWS CloudTrail files are not tampered with after they are created. Currently, the company uses AWS Identity and Access Management (IAM) to restrict access to specific trails. The company's security team needs the ability to trace the integrity of each file.
What is the MOST operationally efficient solution that meets these requirements?

• A.Create an AWS Lambda function that is invoked each time a new file is delivered to the CloudTrail bucket. Configure the Lambda function to compute an MD5 hash check on the file and store the result as a tag in an Amazon 53 object. The security team can use the information in the tag to verify the integrity of the delivered files.
• B.Enable the CloudTrail file integrity feature on the trail. The security team can use the digest file that is created by CloudTrail to verify the integrity of the delivered files.
• C.Create an Amazon EventBridge (Amazon CloudWatch Events) rule that invokes an AWS Lambda function when a new file is delivered. Configure the Lambda function to compute an MD5 hash check on the file and store the result in an Amazon DynamoDB table. The security team can use the values that are stored in DynamoDB to verify the integrity of the delivered files.
• D.Enable the CloudTrail file integrity feature on an Amazon S3 bucket. Create an IAM policy that grants the security team access to the file integrity logs that are stored in the S3 bucket.

Comment: *

Name: *

Email: *

Verification: *

A company uses an AWS CloudFormation template to provision an Amazon EC2 instance and an Amazon RDS DB instance A SysOps administrator must update the template to ensure that the DB instance is created before the EC2 instance is launched What should the SysOps administrator do to meet this requirement?

• A.Add a wait condition to the template Update the EC2 instance user data script to send a signal after the EC2 instance is started
• B.Add the DependsOn attribute to the EC2 instance resource, and provide the logical name of the RDS resource
• C.Change the order of the resources in the template so that the RDS resource is listed before the EC2 instance resource
• D.Create multiple templates Use AWS CloudFormation StackSets to wait for one stack to complete before the second stack is created

Comment: *

Name: *

Email: *

Verification: *

A SysOps Administrator is using AWS KMS with AWS-generated key material to encrypt an Amazon EBS volume in a company's AWS environment. The Administrator wants to rotate the KMS keys using automatic key rotation, and needs to ensure that the EBS volume encrypted with the current key remains readable.
What should be done to accomplish this?

• A.Back up the current KMS key and enable automatic key rotation.
• B.Create a new key in AWS KMS and assign the key to Amazon EBS.
• C.Enable automatic key rotation of the EBS volume key in AWS KMS.
• D.Upload ne key material to the EBS volume key in AWS KMS to enable automatic key rotation for the volume.

Comment: *

Name: *

Email: *

Verification: *