A company has attached the following policy to an IAM user:


Which of the following actions are allowed for the IAM user?

• A.Amazon RDS DescribeDBInstances action in the us-east-1 Region
• B.Amazon EC2 Describe Instances action in the us-east-1 Region
• C.Amazon EC2 AttachNetworkinterf ace action in the eu-west-1 Region
• D.Amazon S3 Putobject operation in a bucket named testbucket

Comment: *

Name: *

Email: *

Verification: *

An ecommerce company uses an Amazon ElastiCache for Memcached cluster for in-memory caching of popular product queries on the shopping site. When viewing recent Amazon CloudWatch metrics data for the ElastiCache cluster, the SysOps administrator notices a large number of evictions.
Which of the following actions will reduce these evictions? (Choose two.)

• A.Add an additional node to the ElastiCache cluster.
• B.Increase the ElastiCache time to live (TTL).
• C.Increase the individual node size inside the ElastiCache cluster.
• D.Put an Elastic Load Balancer in front of the ElastiCache cluster.
• E.Use Amazon Simple Queue Service (Amazon SQS) to decouple the ElastiCache cluster.

Comment: *

Name: *

Email: *

Verification: *

A company asks a SysOps administrator to ensure that AWS CloudTrail files are not tampered with after they are created. Currently, the company uses AWS Identity and Access Management (IAM) to restrict access to specific trails. The company's security team needs the ability to trace the integrity of each file.
What is the MOST operationally efficient solution that meets these requirements?

• A.Enable the CloudTrail file integrity feature on an Amazon S3 bucket. Create an IAM policy that grants the security team access to the file integrity logs that are stored in the S3 bucket.
• B.Enable the CloudTrail file integrity feature on the trail. The security team can use the digest file that is created by CloudTrail to verify the integrity of the delivered files.
• C.Create an AWS Lambda function that is invoked each time a new file is delivered to the CloudTrail bucket. Configure the Lambda function to compute an MD5 hash check on the file and store the result as a tag in an Amazon S3 object. The security team can use the information in the tag to verify the integrity of the delivered files.
• D.Create an Amazon EventBridge (Amazon CloudWatch Events) rule that invokes an AWS Lambda function when a new file is delivered. Configure the Lambda function to compute an MD5 hash check on the file and store the result in an Amazon DynamoDB table. The security team can use the values that are stored in DynamoDB to verify the integrity of the delivered files.

Comment: *

Name: *

Email: *

Verification: *

A company is attempting to manage its costs in the AWS Cloud. A SysOps administrator needs specific company-defined tags that are assigned to resources to appear on the billing report.
What should the SysOps administrator do to meet this requirement?

• A.Activate the tags as AWS generated cost allocation tags.
• B.Activate the tags as user-defined cost allocation tags.
• C.Create a new cost category. Select the account billing dimension.
• D.Create a new AWS Cost and Usage Report. Include the resource IDs.

Comment: *

Name: *

Email: *

Verification: *

A company has launched a social media website that gives users the ability to upload images directly to a centralized Amazon S3 bucket. The website is popular in areas that are geographically distant from the AWS Region where the S3 bucket is located. Users are reporting that uploads are slow. A SysOps administrator must improve the upload speed.
What should the SysOps administrator do to meet these requirements?

• A.Create S3 access points in Regions that are closer to the users.
• B.Create an accelerator in AWS Global Accelerator for the S3 bucket.
• C.Enable S3 Transfer Acceleration on the S3 bucket.
• D.Enable cross-origin resource sharing (CORS) on the S3 bucket.

Comment: *

Name: *

Email: *

Verification: *