A SysOps administrator is maintaining a web application using an Amazon CloudFront web distribution, an Application Load Balancer (ALB), Amazon RDS, and Amazon EC2 in a VPC. All services have logging enabled. The administrator needs to investigate HTTP Layer 7 status codes from the web application.
Which log sources contain the status codes? (Choose two.)

• A.VPC Flow Logs
• B.AWS CloudTrail logs
• C.ALB access logs
• D.CloudFront access logs
• E.RDS logs

Comment: *

Name: *

Email: *

Verification: *

A company uses an AWS Service Catalog portfolio to create and manage resources. A SysOps administrator must create a replica of the company's existing AWS infrastructure in a new AWS account.
What is the MOST operationally efficient way to meet this requirement?

• A.Create an AWS CloudFormation template to use the AWS Service Catalog portfolio in the new AWS account.
• B.In the new AWS account, manually create an AWS Service Catalog portfolio that duplicates the original portfolio.
• C.Run an AWS Lambda function to create a new AWS Service Catalog portfolio based on the output of the DescribePortfolio API operation.
• D.Share the AWS Service Catalog portfolio with the new AWS account. Import the portfolio into the new AWS account.

Comment: *

Name: *

Email: *

Verification: *

A SysOps administrator is responsible for a company's security groups. The company wants to maintain a documented trail of any changes that are made to the security groups. The SysOps administrator must receive notification whenever the security groups change.
Which solution will meet these requirements?

• A.Set up Amazon Detective to record security group changes.
  Specify an Amazon CloudWatch Logs log group to store configuration history logs.
  Create an Amazon Simple Queue Service (Amazon SOS) queue for notifications about configuration changes.
  Subscribe the SysOps administrator's email address to the SQS queue.
• B.Set up AWS Systems Manager Change Manager to record security group changes.
  Specify an Amazon CloudWatch Logs log group to store configuration history logs.
  Create an Amazon Simple Notification Service (Amazon SNS) topic for notifications about configuration changes.
  Subscribe the SysOps administrator's email address to the SNS topic.
• C.Set up AWS Config to record security group changes.
  Specify an Amazon S3 bucket as the location for configuration snapshots and history files.
  Create an Amazon Simple Notification Service (Amazon SNS) topic for notifications about configuration changes.
  Subscribe the SysOps administrator's email address to the SNS topic.
• D.Set up Amazon Detective to record security group changes.
  Specify an Amazon S3 bucket as the location for configuration snapshots and history files.
  Create an Amazon Simple Notification Service (Amazon SNS) topic for notifications about configuration changes.
  Subscribe the SysOps administrator's email address to the SNS topic.

Comment: *

Name: *

Email: *

Verification: *

A SysOps Administrator is using AWS KMS with AWS-generated key material to encrypt an Amazon EBS volume in a company's AWS environment. The Administrator wants to rotate the KMS keys using automatic key rotation, and needs to ensure that the EBS volume encrypted with the current key remains readable.
What should be done to accomplish this?

• A.Back up the current KMS key and enable automatic key rotation.
• B.Create a new key in AWS KMS and assign the key to Amazon EBS.
• C.Enable automatic key rotation of the EBS volume key in AWS KMS.
• D.Upload ne key material to the EBS volume key in AWS KMS to enable automatic key rotation for the volume.

Comment: *

Name: *

Email: *

Verification: *

A company uses an Amazon RDS DB instance for data storage for its web application. For disaster recovery purposes, a SysOps administrator has configured an AWS Lambda function that copies the daily DB snapshot to the us-west-2-Region.
The SysOps administrator must provide a custom DNS name, myexampledb, for the DB instance so that the company's developers do not need to update the application code if the DB snapshot must be restored in another Region. The company hosts its corporate domain, example.com, on Amazon Route 53.
Which solution will meet these requirements?

• A.Create a Route 53 alias record that maps myexampledb.example.com to the DB instance domain name. Instruct the developers to refer to myexampledb.example.com in their application. After restoring the DB snapshot in us-west-2, update the alias record to point to the new DB instance domain name.
• B.Create a Route 53 CNAME record that maps myexampledb.example.com to the DB instance domain name. Instruct the developers to refer to myexampledb.example.com in their application. After restoring the DB snapshot in us-west-2, update the CNAME record to point to the new DB instance domain name.
• C.Locate the IP address of the DB instance. Create a Route 53 A record that maps myexamplebd.example.com to the IP address. Instruct the developers to refer to myexampledb.example.com in their application. After restoring the DB snapshot in us-west-2, update the A record to point to the new DB instance IP address.
• D.Locate the IP address of the DB instance. Create a Route 53 alias record that maps myexampledb.example.com to the IP address. Instruct the developers to refer to myexampledb.example.com in their application. After restoring the DB snapshot in us-west-2, update the alias record to point to the new DB instance IP address.

Comment: *

Name: *

Email: *

Verification: *