A company is running an application on premises and wants to use AWS for data backup All of the data must be available locally The backup application can write only to block-based storage that is compatible with the Portable Operating System Interface (POSIX) Which backup solution will meet these requirements?

• A.Configure the backup software to use Amazon S3 as the target for the data backups
• B.Configure the backup software to use Amazon S3 Glacier as the target for the data backups
• C.Use AWS Storage Gateway, and configure it to use gateway-cached volumes
• D.Use AWS Storage Gateway, and configure it to use gateway-stored volumes

Comment: *

Name: *

Email: *

Verification: *

A company is running a website on Amazon EC2 instances that are in an Auto Scaling group. When the website traffic increases, additional instances take several minutes to become available because of a longrunning user data script that installs software. A SysOps administrator must decrease the time that is required for new instances to become available.
Which action should the SysOps administrator take to meet this requirement?

• A.Purchase Reserved Instances to cover 100% of the maximum capacity of the Auto Scaling group.
• B.Use EC2 Image Builder to prepare an Amazon Machine Image (AMI) that has pre-installed software.
• C.Reduce the scaling thresholds so that instances are added before traffic increases.
• D.Update the Auto Scaling group to launch instances that have a storage optimized instance type.

Comment: *

Name: *

Email: *

Verification: *

A company uses AWS CloudFormation to deploy its application infrastructure Recently, a user accidentally changed a property of a database in a CloudFormation template and performed a stack update that caused an interruption to the application A SysOps administrator must determine how to modify the deployment process to allow the DevOps team to continue to deploy the infrastructure, but prevent against accidental modifications to specific resources.
Which solution will meet these requirements?

• A.Attach an IAM policy to the DevOps team role that prevents a CloudFormation stack from updating, with a condition based on the specific Amazon Resource Names (ARNs) of the protected resources
• B.Set up an AWS Config rule to alert based on changes to any CloudFormation stack An AWS Lambda function can then describe the stack to determine if any protected resources were modified and cancel the operation
• C.Launch the CloudFormation templates using a stack policy with an explicit allow for all resources and an explicit deny of the protected resources with an action of Update
• D.Set up an Amazon CloudWatch Events event with a rule to trigger based on any CloudFormation API call An AWS Lambda function can then describe the stack to determine if any protected resources were modified and cancel the operation

Comment: *

Name: *

Email: *

Verification: *

A SysOps administrator needs to configure a solution that will deliver digital content to a set of authorized users through Amazon CloudFront. Unauthorized users must be restricted from access.
Which solution will meet these requirements?

• A.Store the digital content in an Amazon S3 bucket that has public access blocked. Use an origin access identity (OAI) to deliver the content through CloudFront. Restrict S3 bucket access with signed URLs in CloudFront.
• B.Store the digital content in an Amazon S3 bucket that has public access blocked. Use an origin access identity (OAI) to deliver the content through CloudFront. Enable field-level encryption.
• C.Store the digital content in an Amazon S3 bucket that does not have public access blocked. Use signed URLs to access the S3 bucket through CloudFront.
• D.Store the digital content in an Amazon S3 bucket that does not have public access blocked. Use signed cookies for restricted delivery of the content through CloudFront.

Comment: *

Name: *

Email: *

Verification: *

A company using AWS Organizations requires that no Amazon S3 buckets in its production accounts should ever be deleted.
What is the SIMPLEST approach the SysOps administrator can take to ensure S3 buckets in those accounts can never be deleted?

• A.Set up MFA Delete on all the S3 buckets to prevent the buckets from being deleted.
• B.Use service control policies to deny the s3:DeleteBucket action on all buckets in production accounts.
• C.Create an IAM group that has an IAM policy to deny the s3:DeleteBucket action on all buckets in production accounts.
• D.Use AWS Shield to deny the s3:DeleteBucket action on the AWS account instead of all S3 buckets.

Comment: *

Name: *

Email: *

Verification: *