A SysOps administrator must create a solution that automatically shuts down any Amazon EC2 instances that have less than 10% average CPU utilization for 60 minutes or more.
Which solution will meet this requirement In the MOST operationally efficient manner?

• A.Implement a cron job on each EC2 instance to run once every 60 minutes and calculate the current CPU utilization. Initiate an instance shutdown If CPU utilization is less than 10%.
• B.Implement an Amazon CloudWatch alarm for each EC2 instance to monitor average CPU utilization. Set the period at 1 hour, and set the threshold at 10%. Configure an EC2 action on the alarm to stop the instance.
• C.Install the unified Amazon CloudWatch agent on each EC2 instance, and enable the Basic level predefined metric set. Log CPU utilization every 60 minutes, and initiate an instance shutdown if CPU utilization is less than 10%.
• D.Use AWS Systems Manager Run Command to get CPU utilization from each EC2 instance every 60 minutes. Initiate an instance shutdown if CPU utilization is less than 10%.

Comment: *

Name: *

Email: *

Verification: *

A company must migrate its applications to AWS. The company is using Chef recipes for configuration management.
The company wants to continue to use the existing Chef recipes after the applications are migrated to AWS.
What is the MOST operationally efficient solution that meets these requirements?

• A.Use AWS Cloud Format ion to create an Amazon EC2 instance, install a Chef server, and add Chef recipes.
• B.Use AWS CloudFormation to create a stack and add layers for Chef recipes.
• C.Use AWS Elastic Beanstalk with the Docker platform to upload Chef recipes.
• D.Use AWS OpsWorks to create a stack and add layers with Chef recipes.

Comment: *

Name: *

Email: *

Verification: *

A company needs to restrict access to an Amazon S3 bucket to Amazon EC2 instances in a VPC only. All traffic must be over the AWS private network.
What actions should the SysOps administrator take to meet these requirements?

• A.Create a VPC endpoint for the S3 bucket, and create an IAM policy that conditionally limits all S3 actions on the bucket to the VPC endpoint as the source.
• B.Create a VPC endpoint for the S3 bucket, and create an S3 bucket policy that conditionally limits all S3 actions on the bucket to the VPC endpoint as the source.
• C.Create a service-linked role for Amazon EC2 that allows the EC2 instances to interact directly with Amazon S3, and attach an IAM policy to the role that allows the EC2 instances full access to the S3 bucket.
• D.Create a NAT gateway in the VPC, and modify the VPC route table to route all traffic destined for Amazon S3 through the NAT gateway.

Comment: *

Name: *

Email: *

Verification: *

A compliance team requires all administrator passwords tor Amazon RDS DB instances to be changed at toast annually Which solution meets this requirement in the MOST operationally efficient manned

• A.Store the database credentials in AWS Systems Manager Parameter Store as a secure string parameter Configure automatic rotation for the parameter every 365 days
• B.Store the database credentials in AWS Secrets Manager Configure automate rotation for the secret every 365 days
• C.Store the database credentials in a private Amazon S3 bucket Schedule an AWS Lambda function to generate a new set of credentials every 365 days
• D.Store the database credentials as a parameter in the RDS parameter group Create a database trigger to rotate the password every 365 days

Comment: *

Name: *

Email: *

Verification: *

A company uses AWS Organizations to manage multiple AWS accounts with consolidated billing enabled. Organization member account owners want the benefits of Reserved Instances (RIs) but do not want to share RIs with other accounts.
Which solution will meet these requirements?

• A.Purchase RIs in the management account. Disable Rl discount sharing in the member accounts.
• B.Purchase RIs in individual member accounts. Disable Rl discount sharing in the member accounts.
• C.Purchase RIs in the management account. Disable Rl discount sharing in the management account.
• D.Purchase RIs in individual member accounts. Disable Rl discount sharing in the management account.

Comment: *

Name: *

Email: *

Verification: *