A company asks a SysOps administrator to ensure that AWS CloudTrail files are not tampered with after they are created. Currently, the company uses AWS Identity and Access Management (IAM) to restrict access to specific trails. The company's security team needs the ability to trace the integrity of each file.
What is the MOST operationally efficient solution that meets these requirements?

• A.Create an Amazon EventBridge (Amazon CloudWatch Events) rule that invokes an AWS Lambda function when a new file is delivered. Configure the Lambda function to compute an MD5 hash check on the file and store the result in an Amazon DynamoDB table. The security team can use the values that are stored in DynamoDB to verify the integrity of the delivered files.
• B.Create an AWS Lambda function that is invoked each time a new file is delivered to the CloudTrail bucket. Configure the Lambda function to compute an MD5 hash check on the file and store the result as a tag in an Amazon S3 object. The security team can use the information in the tag to verify the integrity of the delivered files.
• C.Enable the CloudTrail file integrity feature on an Amazon S3 bucket. Create an IAM policy that grants the security team access to the file integrity logs that are stored in the S3 bucket.
• D.Enable the CloudTrail file integrity feature on the trail. The security team can use the digest file that is created by CloudTrail to verify the integrity of the delivered files.

Comment: *

Name: *

Email: *

Verification: *

A company hosts several write-intensive applications. These applications use a MySQL database that runs on a single Amazon EC2 instance. The company asks a SysOps administrator to implement a highly available database solution that is ideal for multi-tenant workloads.
Which solution should the SysOps administrator implement to meet these requirements?

• A.Create a second EC2 instance for MySQL.
  Configure the second instance to be a read replica.
• B.Migrate the database to an Amazon Aurora DB cluster.
  Add an Aurora Replica.
• C.Migrate the database to an Amazon Aurora multi-master DB cluster.
• D.Migrate the database to an Amazon RDS for MySQL DB instance.

Comment: *

Name: *

Email: *

Verification: *

A company has multiple AWS Site-to-Site VPN connections between a VPC and its branch offices. The company manages an Amazon Elasticsearch Service (Amazon ES) domain that is configured with public access. The Amazon ES domain has an open domain access policy. A SysOps administrator needs to ensure that Amazon ES can be accessed only from the branch offices while preserving existing data.
Which solution will meet these requirements?

• A.Reconfigure the Amazon ES domain in private subnets in a VPC. Create a security group that allows inbound traffic from the branch office CIDR blocks.
• B.Configure an IP-based domain access policy on Amazon ES. Add an allow statement to the policy that includes the private IP CIDR blocks from each branch office network.
• C.Deploy a new Amazon ES domain in private subnets in a VPC, and import a snapshot from the old domain. Create a security group that allows inbound traffic from the branch office CIDR blocks.
• D.Configure an identity-based access policy on Amazon ES. Add an allow statement to the policy that includes the Amazon Resource Name (ARN) for each branch office VPN connection.

Comment: *

Name: *

Email: *

Verification: *

A company has a private Amazon S3 bucket that contains sensitive information. A SysOps administrator needs to keep logs of the IP addresses from authentication failures that result from attempts to access objects in the bucket. The logs must be stored so that they cannot be overwritten or deleted for 90 days.
Which solution will meet these requirements?

• A.Create an AWS CloudTrail trail.
  Configure the log files to be saved to Amazon CloudWatch Logs.
  Configure the log group with a retention period of 90 days.
• B.Create an AWS CloudTrail trail.
  Configure the log files to be saved to a different S3 bucket.
  Turn on CloudTrail log file integrity validation for 90 days.
• C.Turn on access logging for the S3 bucket.
  Configure the access logs to be saved to Amazon CloudWatch Logs.
  Configure the log group with a retention period of 90 days.
• D.Turn on access logging for the S3 bucket.
  Configure the access logs to be saved in a second S3 bucket.
  Turn on S3 Object Lock on the second S3 bucket, and configure a default retention period of 90 days.

Comment: *

Name: *

Email: *

Verification: *

A company is planning to host its stateful web-based applications on AWS. A SysOps administrator is using an Auto Scaling group of Amazon EC2 instances. The web applications will run 24 hours a day, 7 days a week throughout the year. The company must be able to change the instance type within the same instance family later in the year based on the traffic and usage patterns.
Which EC2 instance purchasing option will meet these requirements MOST cost-effectively?

• A.Convertible Reserved Instances
• B.On-Demand instances
• C.Spot instances
• D.Standard Reserved instances

Comment: *

Name: *

Email: *

Verification: *