A development team recently deployed a new version of a web application to production After the release, penetration testing revealed a cross-site scripting vulnerability that could expose user data Which AWS service will mitigate this issue?

• A.AWS Shield Standard
• B.AWS WAF
• C.Elastic Load Balancing
• D.Amazon Cognito

Comment: *

Name: *

Email: *

Verification: *

A SysOps administrator recently configured Amazon S3 Cross-Region Replication on an S3 bucket Which of the following does this feature replicate to the destination S3 bucket by default?

• A.Objects that are stored in S3 Glacier
• B.Objects that existed before replication was configured
• C.Object metadata
• D.Objects in the source S3 bucket for which the bucket owner does not have permissions

Comment: *

Name: *

Email: *

Verification: *

A company wants to archive sensitive data on Amazon S3 Glacier. The company's regulatory and compliance requirements do not allow any modifications to the data by any account.
Which solution meets these requirements?

• A.Configure S3 Object Lock in governance mode. Upload all files within 24 hours.
• B.Attach a vault lock policy to an S3 Glacier vault that contains the archived data. Use the lock ID to validate the vault lock policy within 24 hours.
• C.Attach a vault lock policy to an S3 Glacier vault that contains the archived data. Use the lock ID to validate the vault lock policy after 24 hours.
• D.Configure S3 Object Lock in governance mode. Upload all files after 24 hours.

Comment: *

Name: *

Email: *

Verification: *

A manufacturing company uses an Amazon RDS DB instance to store inventory of all stock items. The company maintains several AWS Lambda functions that interact with the database to add, update, and delete items. The Lambda functions use hardcoded credentials to connect to the database.
A SysOps administrator must ensure that the database credentials are never stored in plaintext and that the password is rotated every 30 days.
Which solution will meet these requirements in the MOST operationally efficient manner?

• A.Store the database password as an environment variable for each Lambda function. Create a new Lambda function that is named PasswordRotate. Use Amazon EventBridge (Amazon CloudWatch Events) to schedule the PasswordRotate function every 30 days to change the database password and update the environment variable for each Lambda function.
• B.Use AWS Key Management Service (AWS KMS) to encrypt the database password and to store the encrypted password as an environment variable for each Lambda function. Grant each Lambda function access to the KMS key so that the database password can be decrypted when required. Create a new Lambda function that is named PasswordRotate to change the password every 30 days.
• C.Use AWS Secrets Manager to store credentials for the database. Create a Secrets Manager secret, and select the database so that Secrets Manager will use a Lambda function to update the database password automatically. Specify an automatic rotation schedule of 30 days. Update each Lambda function to access the database password from SecretsManager.
• D.Use AWS Systems Manager Parameter Store to create a secure string to store credentials for the database. Create a new Lambda function called PasswordRotate. Use Amazon EventBridge (Amazon CloudWatch Events) to schedule the PasswordRotate function every 30 days to change the database password and to update the secret within Parameter Store. Update each Lambda function to access the database password from Parameter Store.

Comment: *

Name: *

Email: *

Verification: *

A company uses AWS Organizations to manage its AWS accounts. A SysOps administrator must create a backup strategy for all Amazon EC2 instances across all the company's AWS accounts.
Which solution will meet these requirements In the MOST operationally efficient way?

• A.Use AWS Backup In the management account to deploy policies for all accounts and resources.
• B.Create an AWS CloudFormation stack set in the management account to add an AutoBackup=True tag to every EC2 instance
• C.Use a service control policy (SCP) to run EC2 instance snapshots on a scheduled basis in each account.
• D.Deploy an AWS Lambda function to each account to run EC2 instance snapshots on a scheduled basis.

Comment: *

Name: *

Email: *

Verification: *