A company uses an AWS CloudFormation template to provision an Amazon EC2 instance and an Amazon RDS DB instance. A SysOps administrator must update the template to ensure that the DB instance is created before the EC2 instance is launched.
What should the SysOps administrator do to meet this requirement?

• A.Create multiple templates. Use AWS CloudFormation StackSets to wait for one stack to complete before the second stack is created.
• B.Change the order of the resources in the template so that the RDS resource is listed before the EC2 instance resource.
• C.Add a wait condition to the template. Update the EC2 instance user data script to send a signal after the EC2 instance is started.
• D.Add the DependsOn attribute to the EC2 instance resource, and provide the logical name of the RDS resource.

Comment: *

Name: *

Email: *

Verification: *

A company hosts an online shopping portal in the AWS Cloud. The portal provides HTTPS security by using a TLS certificate on an Elastic Load Balancer (ELB). Recently, the portal suffered an outage because the TLS certificate expired. A SysOps administrator must create a solution to automatically renew certificates to avoid this issue in the future.
What is the MOST operationally efficient solution that meets these requirements?

• A.Request a public certificate by using AWS Certificate Manager (ACM). Associate the certificate from ACM with the ELB. Write a scheduled AWS Lambda function to renew the certificate every 18 months.
• B.Request a public certificate by using AWS Certificate Manager (ACM). Associate the certificate from ACM with the ELB. ACM will automatically manage the renewal of the certificate.
• C.Register a certificate with a third-party certificate authority (CA). Import this certificate into AWS Certificate Manager (ACM). Associate the certificate from ACM with the ELB. ACM will automatically manage the renewal of the certificate.
• D.Register a certificate with a third-party certificate authority (CA). Configure the ELB to import the certificate directly from the CA. Set the certificate refresh cycle on the ELB to refresh when the certificate is within 3 months of the expiration date.

Comment: *

Name: *

Email: *

Verification: *

A SysOps administrator noticed that the cache hit ratio for an Amazon CloudFront distribution is less than 10%.
Which collection of configuration changes will increase the cache hit ratio for the distribution? (Select TWO.)

• A.Enable automatic compression of objects in the Cache Behavior Settings.
• B.Change the Viewer Protocol Policy to use HTTPS only.
• C.Configure the distribution to use presigned cookies and URLs to restrict access to the distribution.
• D.Ensure that only required cookies, query strings, and headers are forwarded in the Cache Behavior Settings.
• E.Increase the CloudFront time to live (TTL) settings in the Cache Behavior Settings.

Comment: *

Name: *

Email: *

Verification: *

A new website will run on Amazon EC2 instances behind an Application Load Balancer. Amazon Route 53 will be used to manage DNS records.
What type of record should be set in Route 53 to point the website's apex domain name (for example.company.com to the Application Load Balancer?

• A.TXT
• B.SOA
• C.CNAME
• D.ALIAS

Comment: *

Name: *

Email: *

Verification: *

A company has a critical serverless application that uses multiple AWS Lambda functions. Each Lambda function generates 1 GB of log data daily in tts own Amazon CloudWatch Logs log group. The company's security team asks for a count of application errors, grouped by type, across all of the log groups.
What should a SysOps administrator do to meet this requirement?

• A.Perform an Amazon Athena query that uses the SELECT and GROUP BY keywords.
• B.Perform a CloudWatch Logs Insights query that uses the stats command and count function.
• C.Perform a CloudWatch Logs search that uses the groupby keyword and count function.
• D.Perform an Amazon RDS query that uses the SELECT and GROUP BY keywords.

Comment: *

Name: *

Email: *

Verification: *