A company has a stateful web application that is hosted on Amazon EC2 instances in an Auto Scaling group. The instances run behind an Application Load Balancer (ALB) that has a single target group. The ALB is configured as the origin in an Amazon CloudFront distribution. Users are reporting random logouts from the web application.
Which combination of actions should a SysOps administrator take to resolve this problem? (Select TWO.)

• A.Change to the least outstanding requests algorithm on the ALB target group.
• B.Configure cookie forwarding in the CloudFront distribution cache behavior.
• C.Configure header forwarding in the CloudFront distribution cache behavior.
• D.Enable group-level stickiness on the ALB listener rule.
• E.Enable sticky sessions on the ALB target group.

Comment: *

Name: *

Email: *

Verification: *

A company uses AWS Organizations to manage its AWS accounts. A SysOps administrator must create a backup strategy for all Amazon EC2 instances across all the company's AWS accounts.
Which solution will meet these requirements In the MOST operationally efficient way?

• A.Use a service control policy (SCP) to run EC2 instance snapshots on a scheduled basis in each account.
• B.Create an AWS CloudFormation stack set in the management account to add an AutoBackup=True tag to every EC2 instance
• C.Use AWS Backup In the management account to deploy policies for all accounts and resources.
• D.Deploy an AWS Lambda function to each account to run EC2 instance snapshots on a scheduled basis.

Comment: *

Name: *

Email: *

Verification: *

A SysOps administrator needs to design a high-traffic static website. The website must be highly available and must provide the lowest possible latency to users across the globe.
Which solution will meet these requirements?

• A.Create an Application Load Balancer (ALB) and a target group. Create an Amazon EC2 Auto Scaling group with at least two EC2 instances in the associated target group. Store the website content on the EC2 instances. Use Amazon Route 53 to create an alias record that points to the ALB.
• B.Create an Amazon S3 bucket, and upload the website content to the S3 bucket. Create an Amazon CloudFront distribution, and set the S3 bucket as the origin. Use Amazon Route 53 to create an alias record that points to the CloudFront distribution.
• C.Create an Amazon S3 bucket, and upload the website content to the S3 bucket. Create an Amazon CloudFront distribution in each AWS Region, and set the S3 bucket as the origin. Use Amazon Route 53 to create a DNS record that uses a geolocation routing policy to route traffic to the correct CloudFront distribution based on where the request originates.
• D.Create an Application Load Balancer (ALB) and a target group in two Regions. Create an Amazon EC2 Auto Scaling group in each Region with at least two EC2 instances in each target group. Store the website content on the EC2 instances. Use Amazon Route 53 to create a DNS record that uses a geolocation routing policy to route traffic to the correct ALB based on where the request originates.

Comment: *

Name: *

Email: *

Verification: *

An Amazon S3 Inventory report reveals that more than 1 million objects in an S3 bucket are not encrypted These objects must be encrypted, and all future objects must be encrypted at the time they are written Which combination of actions should a SysOps administrator take to meet these requirements? (Select TWO )

• A.Use S3 Event Notifications to invoke an AWS Lambda function on all new object-created events for the S3 bucket Configure the Lambda function to check whether the object is encrypted and to run an AWS Systems Manager Automation document to encrypt the object in place when an unencrypted object is found
• B.Filter the S3 Inventory report by using S3 Select to find all objects that are not encrypted Send each object name as a message to an Amazon Simple Queue Service (Amazon SQS) queue Use the SQS queue to invoke an AWS Lambda function to tag each object with a key of "Encryption" and a value of "SSE-KMS"
• C.Filter the S3 Inventory report by using S3 Select to find all objects that are not encrypted Create an S3 Batch Operations job to copy each object in place with en cryption enabled
• D.Edit the properties of the S3 bucket to enable default server-side encryption
• E.Create an AWS Config rule that runs evaluations against configuration changes to the S3 bucket When an unencrypted object is found run an AWS Systems Manager Automation document to encrypt the object in place

Comment: *

Name: *

Email: *

Verification: *

A company is tunning a website on Amazon EC2 instances thai are in an Auto Scaling group When the website traffic increases, additional instances lake several minutes to become available because ot a long-running user data script that installs software A SysOps administrator must decrease the time that is required (or new instances to become available Which action should the SysOps administrator take to meet this requirement?

• A.Purchase Reserved Instances to cover 100% of the maximum capacity of the Auto Scaling group
• B.Use EC2 Image Builder to prepare an Amazon Machine Image (AMI) that has pre-installed software
• C.Reduce the scaling thresholds so that instances are added before traffic increases
• D.Update the Auto Scaling group to launch instances that have a storage optimized instance type

Comment: *

Name: *

Email: *

Verification: *