A company uses an AWS CloudFormation template to provision an Amazon EC2 instance and an Amazon RDS DB instance A SysOps administrator must update the template to ensure that the DB instance is created before the EC2 instance is launched What should the SysOps administrator do to meet this requirement?

• A.Add a wait condition to the template Update the EC2 instance user data script to send a signal after the EC2 instance is started
• B.Add the DependsOn attribute to the EC2 instance resource, and provide the logical name of the RDS resource
• C.Change the order of the resources in the template so that the RDS resource is listed before the EC2 instance resource
• D.Create multiple templates Use AWS CloudFormation StackSets to wait for one stack to complete before the second stack is created

Comment: *

Name: *

Email: *

Verification: *

A company has multiple AWS Site-to-Site VPN connections between a VPC and its branch offices. The company manages an Amazon Elasticsearch Service (Amazon ES) domain that is configured with public access. The Amazon ES domain has an open domain access policy. A SysOps administrator needs to ensure that Amazon ES can be accessed only from the branch offices while preserving existing data.
Which solution will meet these requirements?

• A.Reconfigure the Amazon ES domain in private subnets in a VPC. Create a security group that allows inbound traffic from the branch office CIDR blocks.
• B.Configure an IP-based domain access policy on Amazon ES. Add an allow statement to the policy that includes the private IP CIDR blocks from each branch office network.
• C.Configure an identity-based access policy on Amazon ES. Add an allow statement to the policy that includes the Amazon Resource Name (ARN) for each branch office VPN connection.
• D.Deploy a new Amazon ES domain in private subnets in a VPC, and import a snapshot from the old domain. Create a security group that allows inbound traffic from the branch office CIDR blocks.

Comment: *

Name: *

Email: *

Verification: *

A company hosts a web application on an Amazon EC2 instance in a production VPC. Client connections to the application are failing. A SysOps administrator inspects the VPC flow logs and finds the following entry:
2 111122223333 eni-<###> 192.0.2.15 203.0.113.56 40711 443 6 1 40 1418530010 1418530070 REJECT OK What is a possible cause of these failed connections?

• A.A security group is denying traffic on port 443.
• B.The EC2 instance is shut down.
• C.The network ACL is blocking HTTPS traffic.
• D.The VPC has no internet gateway attached.

Comment: *

Name: *

Email: *

Verification: *

A SysOps administrator is optimizing the cost of a workload. The workload is running in multiple AWS Regions and is using AWS Lambda with Amazon EC2 On-Demand Instances for the compute. The overall usage is predictable. The amount of compute that is consumed in each Region varies, depending on the users' locations.
Which approach should the SysOps administrator use to optimize this workload?

• A.Purchase Convertible Reserved Instances by calculating the usage baseline.
• B.Purchase Standard Reserved Instances by calculating the usage baseline.
• C.Purchase EC2 Instance Savings Plane based on the usage during the past 30 days
• D.Purchase Compute Savings Plans based on the usage during the past 30 days

Comment: *

Name: *

Email: *

Verification: *

A SysOps administrator is deploying a test site running on Amazon EC2 instances. The application requires both incoming and outgoing connectivity to the internet.
Which combination of steps are required to provide internet connectivity to the EC2 instances? (Choose two.)

• A.Add a NAT gateway to a public subnet.
• B.Attach a private address to the elastic network interface on the EC2 instance.
• C.Attach an Elastic IP address to the internet gateway.
• D.Create an internet gateway and attach it to a VPC.
• E.Add an entry to the route table for the subnet that points to an internet gateway.

Comment: *

Name: *

Email: *

Verification: *