A company runs a website from Sydney, Australi
a. Users in the United States (US) and Europe are reporting that images and videos are taking a long time to load. However, local testing in Australia indicates no performance issues. The website has a large amount of static content in the form of images and videos that are stored m Amazon S3.
Which solution will result In the MOST Improvement In the user experience for users In the US and Europe?

• A.Configure AWS PrivateLink for Amazon S3.
• B.Create an Amazon API Gateway API in each AWS Region. Cache the content locally.
• C.Configure S3 Transfer Acceleration.
• D.Create an Amazon CloudFront distribution. Distribute the static content to the CloudFront edge locations

Comment: *

Name: *

Email: *

Verification: *

While setting up an AWS managed VPN connection, a SysOps administrator creates a customer gateway resource in AWS The customer gateway device resides in a data center with a NAT gateway in front of it What address should be used to create the customer gateway resource?

• A.The private IP address of the customer gateway device
• B.The public IP address of the NAT device in front of the customer gateway device
• C.The public IP address of the customer gateway device
• D.The MAC address of the NAT device in front of the customer gateway device

Comment: *

Name: *

Email: *

Verification: *

A company is storing media content in an Amazon S3 bucket and uses Amazon CloudFront to distribute the content to its users. Due to licensing terms, the company is not authorized to distribute the content in some countries. A SysOps administrator must restrict access to certain countries.
What is the MOST operationally efficient solution that meets these requirements?

• A.Configure the S3 bucket policy to deny the GetObject operation based on the S3:LocationConstraint condition.
• B.Update the application to generate signed CloudFront URLs only for IP addresses in authorized countries.
• C.Enable the geo restriction feature in the CloudFront distribution to prevent access from unauthorized countries.
• D.Create a secondary origin access identity (OAI). Configure the S3 bucket policy to prevent access from unauthorized countries.

Comment: *

Name: *

Email: *

Verification: *

A company wants to create an automated solution for all accounts managed by AWS Organizations to detect any worry groups that urn 0.0.0.0/0 as the source address for inbound traffic. The company also wants to automatically remediate any noncompliant security groups by restricting access to a specific CIDR block corresponds with the company's intranet.

• A.Create an AWS Config rule to detect noncompliant security groups. Set up automatic remediation to change the 0.0.0.0/0 source address to the approved CIDK block.
• B.Create an AWS Lambda function to inspect now and existing security groups check for a noncompliant 0.0.0.0A) source address and change the source address to the approved CIDR block.
• C.Create an IAM policy to deny the creation of security groups that have 0.0.0.0/0 as the source address Attach this 1AM policy to every user in the company.
• D.Create a service control policy (SCP) for the organizational unit (OU) to deny the creation of security groups that have the 0.0.0.0/0 source address. Set up automatic remediation to change Vie 0.0.0.0/0 source address to the approved CIDR block.

Comment: *

Name: *

Email: *

Verification: *

A company is running an application on premises and wants to use AWS for data backup All of the data must be available locally The backup application can write only to block-based storage that is compatible with the Portable Operating System Interface (POSIX) Which backup solution will meet these requirements?

• A.Use AWS Storage Gateway, and configure it to use gateway-cached volumes
• B.Use AWS Storage Gateway, and configure it to use gateway-stored volumes
• C.Configure the backup software to use Amazon S3 Glacier as the target for the data backups
• D.Configure the backup software to use Amazon S3 as the target for the data backups

Comment: *

Name: *

Email: *

Verification: *