A software development company has multiple developers who work on the same product. Each developer must have their own development environment, and these development environments must be identical. Each development environment consists of Amazon EC2 instances and an Amazon RDS DB instance. The development environments should be created only when necessary, and they must be terminated each night to minimize costs.
What is the MOST operationally efficient solution that meets these requirements?

• A.Provide developers with CLI commands so that they can provision their own development environment when necessary. Schedule a nightly Amazon EventBridge (Amazon CloudWatch Events) rule to invoke an AWS Lambda function to terminate all EC2 instances and the DB instance.
• B.Provide developers with access to the same AWS CloudFormation template so that they can provision their development environment when necessary. Schedule a nightly cron job on each development instance to stop all running processes to reduce CPU utilization to nearly zero.
• C.Provide developers with access to the same AWS CloudFormation template so that they can provision their development environment when necessary. Schedule a nightly Amazon EventBridge (Amazon CloudWatch Events) rule to invoke an AWS Lambda function to delete the AWS CloudFormation stacks.
• D.Provide developers with CLI commands so that they can provision their own development environment when necessary. Schedule a nightly Amazon EventBridge (Amazon CloudWatch Events) rule to cause AWS CloudFormation to delete all of the development environment resources.

Comment: *

Name: *

Email: *

Verification: *

A company is running a website on Amazon EC2 instances behind an Application Load Balancer (ALB).
The company configured an Amazon CloudFront distribution and set the ALB as the origin.
The company created an Amazon Route 53 CNAME record to send all traffic through the CloudFront distribution.
As an unintended side effect, mobile users are now being served the desktop version of the website.
Which action should a SysOps administrator take to resolve this issue?

• A.Configure the CloudFront distribution behavior to forward the User-Agent header.
• B.Configure the CloudFront distribution origin settings.
  Add a User-Agent header to the list of origin custom headers.
• C.Enable IPv6 on the ALB.
  Update the CloudFront distribution origin settings to use the dualstack endpoint.
• D.Enable IPv6 on the CloudFront distribution.
  Update the Route 53 record to use the dualstack endpoint.

Comment: *

Name: *

Email: *

Verification: *

A company has a simple web application that runs on a set of Amazon EC2 instances behind an Elastic Load Balancer in the eu-west-2 Region. Amazon Route 53 holds a DNS record for the application with a simple touting policy.
Users from all over the world access the application through their web browsers.
The company needs to create additional copies of the application in the us-east-1 Region and in the ap-south-1 Region.
The company must direct users to the Region that provides the fastest response times when the users load the application.
What should a SysOps administrator do to meet these requirements?

• A.In each new Region, create a copy of the application on new EC2 instances.
  Add these new EC2 instances to the Elastic Load Balancer in eu-west-2.
  Transition to a latency routing policy.
• B.In each new Region, create a new Elastic Load Balancer and a new set of EC2 instances to run a copy of the application.
  Transition to a latency routing policy.
• C.In each new Region, create a copy of the application on new EC2 instances.
  Add these new EC2 instances to the Elastic Load Balancer in eu-west-2.
  Transition to a multivalue routing policy.
• D.In each new Region, create a new Elastic Load Balancer and a new set of EC2 Instances to run a copy of the application.
  Transition to a geolocation routing policy.

Comment: *

Name: *

Email: *

Verification: *

A SysOps administrator receives an alert from Amazon GuardDuty about suspicious network activity on an Amazon FC2 instance. The GuardDuty finding lists a new external IP address as a traffic destination. The SysOps administrator does not recognize the external IP address. The SysOps administrator must block traffic to the external IP address that GuardDuty identified Which solution will meet this requirement?

• A.Create a new security group to block traffic to the external IP address Assign the new security group to the entire VPC
• B.Create a new security group to block traffic to the external IP address. Assign the new security group to the EC2 instance
• C.Create a network ACL Add an outbound deny rule tor traffic to the external IP address
• D.Use VPC flow logs with Amazon Athena to block traffic to the external IP address

Comment: *

Name: *

Email: *

Verification: *

Application A runs on Amazon EC2 instances behind a Network Load Balancer (NLB). The EC2 instances are in an Auto Scaling group and are in the same subnet that is associated with the NLB. Other applications from an on-premises environment cannot communicate with Application A on port 8080.
To troubleshoot the issue, a SysOps administrator analyzes the flow logs. The flow logs include the following records:

What is the reason for the rejected traffic?

• A.The ACL of the on-premises environment does not allow traffic to the AWS environment.
• B.The security group of the EC2 instances has no Allow rule for the traffic from the NLB.
• C.The security group of the NLB has no Allow rule for the traffic from the on-premises environment.
• D.The network ACL that is associated with the subnet does not allow outbound traffic for the ephemeral port range.

Comment: *

Name: *

Email: *

Verification: *