A company runs an application that uses a MySQL database on an Amazon EC2 instance. The EC2 instance has a General Purpose SSD Amazon Elastic Block Store (Amazon EBS) volume. The company made changes to the application code and now wants to perform load testing to evaluate the impact of the code changes.
A SysOps administrator must create a new MySQL instance from a snapshot of the existing production instance. This new instance needs to perform as similarly as possible to the production instance.
Which restore option meets these requirements?

• A.Use EBS fast snapshot restore to create a new General Purpose SSD EBS volume from the production snapshot.
• B.Use EBS fast snapshot restore to create a new Provisioned IOPS SSD EBS volume from the production snapshot.
• C.Use EBS snapshot restore to create a new General Purpose SSD EBS volume from the production snapshot.
• D.Use EBS snapshot restore to create a new Provisioned IOPS SSD EBS volume from the production snapshot.

Comment: *

Name: *

Email: *

Verification: *

A company wants to create an automated solution for all accounts managed by AWS Organizations to detect any worry groups that urn 0.0.0.0/0 as the source address for inbound traffic. The company also wants to automatically remediate any noncompliant security groups by restricting access to a specific CIDR block corresponds with the company's intranet.

• A.Create an IAM policy to deny the creation of security groups that have 0.0.0.0/0 as the source address Attach this 1AM policy to every user in the company.
• B.Create a service control policy (SCP) for the organizational unit (OU) to deny the creation of security groups that have the 0.0.0.0/0 source address. Set up automatic remediation to change Vie 0.0.0.0/0 source address to the approved CIDR block.
• C.Create an AWS Lambda function to inspect now and existing security groups check for a noncompliant 0.0.0.0A) source address and change the source address to the approved CIDR block.
• D.Create an AWS Config rule to detect noncompliant security groups. Set up automatic remediation to change the 0.0.0.0/0 source address to the approved CIDK block.

Comment: *

Name: *

Email: *

Verification: *

A SysOps administrator needs to provision a new fleet of Amazon EC2 Spot Instances in an Amazon EC2 Auto Scaling group. The Auto Scaling group will use a wide range of instance types. The configured fleet must come from pools that have the most availability for the number of instances that are launched.
Which solution will meet these requirements?

• A.Launch the Spot Instances up to the maximum capacity of the Auto Scaling group.
• B.Launch the Spot Instances by using the diversified strategy.
• C.Launch the Spot Instances by using the capacity optimized strategy.
• D.Use the Spot Instance advisor to help determine the best Spot allocation strategy.

Comment: *

Name: *

Email: *

Verification: *

A company is migrating its production file server to AWS. All data that is stored on the file server must remain accessible if an Availability Zone becomes unavailable or when system maintenance is performed. Users must be able to interact with the file server through the SMB protocol. Users also must have the ability to manage file permissions by using Windows ACLs.
Which solution will net these requirements?

• A.Create a single AWS Storage Gateway file gateway.
• B.Create an Amazon FSx for Windows File Server Multi-AZ file system.
• C.Deploy two Amazon FSx for Windows File Server Single-AZ 2 file systems. Configure Microsoft Distributed File System Replication (DFSR).
• D.Deploy two AWS Storage Gateway file gateways across two Availability Zones. Configure an Application Load Balancer in front of the file gateways.

Comment: *

Name: *

Email: *

Verification: *

An organization created an Amazon Elastic File System (Amazon EFS) volume with a file system ID of fs-85ba4Kc. and it is actively used by 10 Amazon EC2 hosts The organization has become concerned that the file system is not encrypted How can this be resolved?

• A.Enable encryption on each host's connection to the Amazon EFS volume Each connection must be recreated for encryption to take effect
• B.Enable encryption on the existing EFS volume by using the AWS Command Line Interface
• C.Enable encryption on each host's local drive Restart each host to encrypt the drive
• D.Enable encryption on a newly created volume and copy all data from the original volume Reconnect each host to the new volume

Comment: *

Name: *

Email: *

Verification: *