A development team recently deployed a new version of a web application to production. After the release penetration testing revealed a cross-site scripting vulnerability that could expose user data.
Which AWS service will mitigate this issue?

• A.AWS Shield Standard
• B.Amazon Cognito
• C.Elastic Load Balancing
• D.AWS WAF

Comment: *

Name: *

Email: *

Verification: *

A SysOps administrator is provisioning an Amazon Elastic File System (Amazon EFS) file system to provide shared storage across multiple Amazon EC2 instances The instances all exist in the same VPC across multiple Availability Zones. There are two instances In each Availability Zone. The SysOps administrator must make the file system accessible to each instance with the lowest possible latency.
Which solution will meet these requirements?

• A.Create a mount target for the EFS file system in the VPC. Use the mount target to mount the file system on each of the instances
• B.Create a mount target for the EFS file system in one Availability Zone of the VPC. Use the mount target to mount the file system on the instances in that Availability Zone. Share the directory with the other instances.
• C.Create a mount target for each instance. Use each mount target to mount the EFS file system on each respective instance.
• D.Create a mount target in each Availability Zone of the VPC Use the mount target to mount the EFS file system on the Instances in the respective

Comment: *

Name: *

Email: *

Verification: *

A SysOps administrator is responsible for a large fleet of Amazon EC2 instances and must know whether any instances will be affected by upcoming hardware maintenance. Which option would provide this information with the LEAST administrative overhead?

• A.Deploy a third-party monitoring solution to provide real-time EC2 instance monitoring
• B.List any instances with failed system status checks using the AWS Management Console
• C.Monitor AWS CloudTrail for Stopinstances API calls
• D.Review the AWS Personal Health Dashboard

Comment: *

Name: *

Email: *

Verification: *

A company monitors its account activity using AWS CloudTrail. and is concerned that some log files are being tampered with after the logs have been delivered to the account's Amazon S3 bucket.
Moving forward, how can the SysOps administrator confirm that the log files have not been modified after being delivered to the S3 bucket?

• A.Stream the CloudTrail logs to Amazon CloudWatch Logs to store logs at a secondary location.
• B.Enable log file integrity validation and use digest files to verify the hash value of the log file.
• C.Replicate the S3 log bucket across regions, and encrypt log files with S3 managed keys.
• D.Enable S3 server access logging to track requests made to the log bucket for security audits.

Comment: *

Name: *

Email: *

Verification: *

An AWS Lambda function is intermittently failing several times a day A SysOps administrator must find out how often this error has occurred in the last 7 days Which action will meet this requirement in the MOST operationally efficient manner?

• A.Use Amazon Athena to query the Amazon CloudWatch logs that are associated with the Lambda function
• B.Use Amazon Elasticsearch Service (Amazon ES) to stream the Amazon CloudWatch logs for the Lambda function
• C.Use Amazon Athena to query the AWS CloudTrail logs that are associated with the Lambda function
• D.Use Amazon CloudWatch Logs Insights to query the associated Lambda function logs

Comment: *

Name: *

Email: *

Verification: *