A company needs to view a list of security groups that are open to the internet on port 3389.
What should a SysOps administrator do to meet this requirement?

• A.Use AWS Trusted Advisor to find security groups that allow unrestricted access on port 3389
• B.Use AWS Identity and Access Management Access Analyzer to find any instances that have unrestricted access on port 3389.
• C.Configure Amazon GuardDuty to scan security groups and report unrestricted access on port 3389.
• D.Configure a service control policy (SCP) to identify security groups that allow unrestricted access on port 3389.

Comment: *

Name: *

Email: *

Verification: *

A company uses Amazon Route 53 to manage the public DNS records for the domain example.com. The company deploys an Amazon CloudFront distribution to deliver static assets for a new corporate website. The company wants to create a subdomain that is named "static" and must route traffic for the subdomain to the CloudFront distribution.
How should a SysOps administrator create a new record for the subdomain in Route 53?

• A.Create a CNAME record. Enter static.cloudfront.net as the record name. Enter the CloudFront distribution's public IP address as the value.
• B.Create a CNAME record. Enter static.example.com as the record name. Enter the CloudFront distribution's private IP address as the value.
• C.Create an A record. Enter static.cloudfront.net as the record name. Enter the CloudFront distribution's ID as an alias target.
• D.Create an A record. Enter static.example.com as the record name. Enter the CloudFront distribution's domain name as an alias target.

Comment: *

Name: *

Email: *

Verification: *

A company uses AWS Cloud Formation templates to deploy cloud infrastructure. An analysis of all the company's templates shows that the company has declared the same components in multiple templates. A SysOps administrator needs to create dedicated templates that have their own parameters and conditions for these common components.
Which solution will meet this requirement?

• A.Develop CloudFormation nested stacks.
• B.Develop CloudFormation stack sets.
• C.Develop a CloudFormaiion change set.
• D.Develop CloudFormation macros.

Comment: *

Name: *

Email: *

Verification: *

A company is hosting applications on Amazon EC2 instances. The company is hosting a database on an Amazon RDS for PostgreSQL DB instance. The company requires all connections to the DB instance to be encrypted.
What should a SysOps administrator do to meet this requirement?

• A.Allow SSL connections to the database by using an inbound security group rule.
• B.Encrypt the database by using an AWS Key Management Service (AWS KMS) encryption key.
• C.Enforce SSL connections to the database by using a custom parameter group.
• D.Patch the database with SSL/TLS by using a custom PostgreSQL extension.

Comment: *

Name: *

Email: *

Verification: *