A SysOps administrator is maintaining a web application using an Amazon CloudFront web distribution, an Application Load Balancer (ALB), Amazon RDS, and Amazon EC2 in a VPC. All services have logging enabled. The administrator needs to investigate HTTP Layer 7 status codes from the web application.
Which log sources contain the status codes? (Choose two.)

• A.VPC Flow Logs
• B.AWS CloudTrail logs
• C.ALB access logs
• D.CloudFront access logs
• E.RDS logs

Comment: *

Name: *

Email: *

Verification: *

A company uses an Amazon Elastic File System (Amazon EFS) file system to share files across many Linux Amazon EC2 instances. A SysOps administrator notices that the file system's PercentIOLimit metric is consistently at 100% for 15 minutes or longer. The SysOps administrator also notices that the application that reads and writes to that file system is performing poorly. They application requires high throughput and IOPS while accessing the file system.
What should the SysOps administrator do to remediate the consistently high PercentIOLimit metric?

• A.Create a new EFS file system that uses Max I/O performance mode. Use AWS DataSync to migrate data to the new EFS file system.
• B.Create an EFS lifecycle policy to transition future files to the Infrequent Access (IA) storage class to improve performance. Use AWS DataSync to migrate existing data to IA storage.
• C.Modify the existing EFS file system and activate Max I/O performance mode.
• D.Modify the existing EFS file system and activate Provisioned Throughput mode.

Comment: *

Name: *

Email: *

Verification: *

A company's financial department needs to view the cost details of each project in an AWS account A SysOps administrator must perform the initial configuration that is required to view cost for each project in Cost Explorer Which solution will meet this requirement?

• A.Use cost categories to define custom groups that are based on AWS cost and usage dimensions
• B.Use AWS Budgets Create AWS Budgets reports
• C.Activate cost allocation tags Add a project tag to the appropriate resources
• D.Configure consolidated billing Create AWS Cost and Usage Reports

Comment: *

Name: *

Email: *

Verification: *

A company has an Amazon CloudFront distribution that uses an Amazon S3 bucket as its origin. During a review of the access logs, the company determines that some requests are going directly to the S3 bucket by using the website hosting endpoint. A SysOps administrator must secure the S3 bucket to allow requests only from CloudFront.
What should the SysOps administrator do to meet this requirement?

• A.Update the S3 bucket policy to allow access only from the CloudFront distribution. Remove access to and from other principals in the S3 bucket policy. Disable website hosting. Create a new origin, and specify the S3 bucket as the new origin. Update the distribution behavior to use the new origin. Remove the existing origin.
• B.Create an origin access identity (OAI) in CloudFront. Associate the OAI with the distribution. Remove access to and from other principals in the S3 bucket policy. Update the S3 bucket policy to allow access only from the OAI.
• C.Create an origin access identity (OAI) in CloudFront. Associate the OAI with the distribution. Update the S3 bucket policy to allow access only from the OAI. Disable website hosting. Create a new origin, and specify the S3 bucket as the new origin. Update the distribution behavior to use the new origin. Remove the existing origin.
• D.Create an origin access identity (OAI) in CloudFront. Associate the OAI with the distribution. Update the S3 bucket policy to allow access only from the OAI. Create a new origin, and specify the S3 bucket as the new origin. Update the distribution behavior to use the new origin. Remove the existing origin.

Comment: *

Name: *

Email: *

Verification: *

An Amazon EC2 instance needs to be reachable from the internet. The EC2 instance is in a subnet with the following route table:

Which entry must a SysOps administrator add to the route table to meet this requirement?

• A.A route for 0.0.0.0/0 that points to an egress-only internet gateway
• B.A route for 0.0.0.0/0 that points to an internet gateway
• C.A route for 0.0.0.0/0 that points to a NAT gateway
• D.A route for 0.0.0.0/0 that points to an elastic network interface

Comment: *

Name: *

Email: *

Verification: *