A SysOps administrator is provisioning an Amazon Elastic File System (Amazon EFS) file system to provide shared storage across multiple Amazon EC2 instances The instances all exist in the same VPC across multiple Availability Zones. There are two instances In each Availability Zone. The SysOps administrator must make the file system accessible to each instance with the lowest possible latency.
Which solution will meet these requirements?

• A.Create a mount target for the EFS file system in the VPC. Use the mount target to mount the file system on each of the instances
• B.Create a mount target for the EFS file system in one Availability Zone of the VPC. Use the mount target to mount the file system on the instances in that Availability Zone. Share the directory with the other instances.
• C.Create a mount target for each instance. Use each mount target to mount the EFS file system on each respective instance.
• D.Create a mount target in each Availability Zone of the VPC Use the mount target to mount the EFS file system on the Instances in the respective

Comment: *

Name: *

Email: *

Verification: *

A SysOps administrator noticed that the cache hit ratio for an Amazon CloudFront distribution is less than 10%.
Which collection of configuration changes will increase the cache hit ratio for the distribution? (Select TWO.)

• A.Change the Viewer Protocol Policy to use HTTPS only.
• B.Enable automatic compression of objects in the Cache Behavior Settings.
• C.Configure the distribution to use presigned cookies and URLs to restrict access to the distribution.
• D.Increase the CloudFront time to live (TTL) settings in the Cache Behavior Settings.
• E.Ensure that only required cookies, query strings, and headers are forwarded in the Cache Behavior Settings.

Comment: *

Name: *

Email: *

Verification: *

A company has an AWS Cloud Formation template that creates an Amazon S3 bucket. A user authenticates to the corporate AWS account with their Active Directory credentials and attempts to deploy the Cloud Formation template. However, the stack creation fails.
Which factors could cause this failure? (Select TWO.)

• A.The user's IAM policy does not allow the s3:CreateBucket action.
• B.The user's IAM policy does not allow the cloudformation:CreateStack action.
• C.The user's IAM policy explicitly denies the s3:PutObject action
• D.The user's IAM policy explicitly denies the s3:ListBucket action.
• E.The user's IAM policy does not allow the cloudformation:CreateStackSet action.

Comment: *

Name: *

Email: *

Verification: *

A company is using an Amazon DynamoDB table for dat
a. A SysOps administrator must configure replication of the table to another AWS Region for disaster recovery.
What should the SysOps administrator do to meet this requirement?

• A.Enable point-in-time recovery.
• B.Enable DynamoDB Streams, and-add a global table Region.
• C.Enable DynamoDB Streams, and add a global secondary index (GSI).
• D.Enable DynamoDB Accelerator (DAX).

Comment: *

Name: *

Email: *

Verification: *

A company is managing multiple AWS accounts in AWS Organizations The company is reviewing internal security of Its AWS environment The company's security administrator has their own AWS account and wants to review the VPC configuration of developer AWS accounts Which solution will meet these requirements in the MOST secure manner?

• A.Create an IAM policy in each developer account that has read-only access related to VPC resources Assign the policy to an IAM user Share the user credentials with the security administrator
• B.Create an IAM policy in each developer account that has administrator access to all Amazon EC2 actions, including VPC actions Assign the policy to an IAM user Share the user credentials with the security administrator
• C.Create an IAM policy m each developer account that has read-only access related to VPC resources Assign the policy to a cross-account IAM role Ask the security administrator to assume the role from their account
• D.Create an IAM policy in each developer account that has administrator access related to VPC resources Assign the policy to a cross-account IAM role Ask the security administrator to assume the role from their account

Comment: *

Name: *

Email: *

Verification: *