{"id":108780,"date":"2025-08-15T03:52:02","date_gmt":"2025-08-15T03:52:02","guid":{"rendered":"https:\/\/www.dumpsbase.com\/freedumps\/?p=108780"},"modified":"2025-08-15T03:52:02","modified_gmt":"2025-08-15T03:52:02","slug":"aws-certified-sysops-administrator-associate-soa-c02-dumps-v15-02-for-success-continue-to-read-soa-c02-free-dumps-part-3-q81-q120-online","status":"publish","type":"post","link":"https:\/\/www.dumpsbase.com\/freedumps\/aws-certified-sysops-administrator-associate-soa-c02-dumps-v15-02-for-success-continue-to-read-soa-c02-free-dumps-part-3-q81-q120-online.html","title":{"rendered":"AWS Certified SysOps Administrator &#8211; Associate SOA-C02 Dumps (V15.02) for Success: Continue to Read SOA-C02 Free Dumps (Part 3, Q81-Q120) Online"},"content":{"rendered":"<p>Whether you are entering the tech workforce or climbing the ladder, the AWS Certified SysOps Administrator &#8211; Associate certification will give you credibility and confidence. Furthermore, the SOA-C02 dumps (V15.02) from DumpsBase will help you pass the exam and earn the certification smoothly. The professional team of DumpsBase has collected the real exam questions to help you conquer the actual exam on the first try. And we have shared some sample questions online for reading:<\/p>\n<ul>\n<li><a href=\"https:\/\/www.dumpsbase.com\/freedumps\/updated-soa-c02-dumps-v15-02-with-557-practice-questions-and-answers-soa-c02-free-dumps-part-1-q1-q40-are-online-for-reading.html\"><em>SOA-C02 free dumps (Part 1, Q1-Q40) of V15.02<\/em><\/a><\/li>\n<li><a href=\"https:\/\/www.dumpsbase.com\/freedumps\/get-certified-with-confidence-by-learning-the-soa-c02-dumps-v15-02-you-can-check-the-soa-c02-free-dumps-part-2-q41-q80-first.html\"><em>SOA-C02 free dumps (Part 2, Q41-Q80) of V15.02<\/em><\/a><\/li>\n<\/ul>\n<p>From these demos, you can trust that DumpsBase is a good partner. Our AWS SOA-C02 exam dumps cut through the noise, giving you only the most relevant, accurate, and exam-ready content. Visit DumpsBase today and explore our comprehensive SOA-C02 study materials, designed specifically to align with the latest exam objectives. Today, we will also share more demos online.<\/p>\n<p><!-- notionvc: 3b97ed26-35e4-48ff-bc6b-e3614f7ae355 --><\/p>\n<h2>AWS <span style=\"background-color: #ccffff;\"><em>SOA-C02 free dumps (Part 3, Q81-Q120) of V15.02 are also available below<\/em><\/span> to help you check the quality:<\/h2>\n<script>\n\t  window.fbAsyncInit = function() {\n\t    FB.init({\n\t      appId            : '622169541470367',\n\t      autoLogAppEvents : true,\n\t      xfbml            : true,\n\t      version          : 'v3.1'\n\t    });\n\t  };\n\t\n\t  (function(d, s, id){\n\t     var js, fjs = d.getElementsByTagName(s)[0];\n\t     if (d.getElementById(id)) {return;}\n\t     js = d.createElement(s); js.id = id;\n\t     js.src = \"https:\/\/connect.facebook.net\/en_US\/sdk.js\";\n\t     fjs.parentNode.insertBefore(js, fjs);\n\t   }(document, 'script', 'facebook-jssdk'));\n\t<\/script><script type=\"text\/javascript\" >\ndocument.addEventListener(\"DOMContentLoaded\", function(event) { \nif(!window.jQuery) alert(\"The important jQuery library is not properly loaded in your site. Your WordPress theme is probably missing the essential wp_head() call. You can switch to another theme and you will see that the plugin works fine and this notice disappears. If you are still not sure what to do you can contact us for help.\");\n});\n<\/script>  \n  \n<div  id=\"watupro_quiz\" class=\"quiz-area single-page-quiz\">\n<p id=\"submittingExam10169\" style=\"display:none;text-align:center;\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/www.dumpsbase.com\/freedumps\/wp-content\/plugins\/watupro\/img\/loading.gif\" width=\"16\" height=\"16\"><\/p>\n\n<div class=\"watupro-exam-description\" id=\"description-quiz-10169\"><\/div>\n\n<form action=\"\" method=\"post\" class=\"quiz-form\" id=\"quiz-10169\"  enctype=\"multipart\/form-data\" >\n<div class='watu-question ' id='question-1' style=';'><div id='questionWrap-1'  class='   watupro-question-id-403684'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>1. <\/span>A SysOps administrator receives notification that an application that is running on Amazon EC2 instances has failed to authenticate to an Amazon RDS database. To troubleshoot, the SysOps administrator needs to investigate AWS Secrets Manager password rotation. <br \/>\r<br>Which Amazon CloudWatch log will provide insight into the password rotation?<\/div><input type='hidden' name='question_id[]' id='qID_1' value='403684' \/><input type='hidden' id='answerType403684' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-403684[]' id='answer-id-1566400' class='answer   answerof-403684 ' value='1566400'   \/><label for='answer-id-1566400' id='answer-label-1566400' class=' answer'><span>AWS CloudTrail logs<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-403684[]' id='answer-id-1566401' class='answer   answerof-403684 ' value='1566401'   \/><label for='answer-id-1566401' id='answer-label-1566401' class=' answer'><span>EC2 instance application logs<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-403684[]' id='answer-id-1566402' class='answer   answerof-403684 ' value='1566402'   \/><label for='answer-id-1566402' id='answer-label-1566402' class=' answer'><span>AWS Lambda function logs<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-403684[]' id='answer-id-1566403' class='answer   answerof-403684 ' value='1566403'   \/><label for='answer-id-1566403' id='answer-label-1566403' class=' answer'><span>RDS database logs<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-2' style=';'><div id='questionWrap-2'  class='   watupro-question-id-403685'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>2. <\/span>An AWS Lambda function is intermittently failing several times a day A SysOps administrator must find out how often this error has occurred in the last 7 days. <br \/>\r<br>Which action will meet this requirement in the MOST operationally efficient manner?<\/div><input type='hidden' name='question_id[]' id='qID_2' value='403685' \/><input type='hidden' id='answerType403685' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-403685[]' id='answer-id-1566404' class='answer   answerof-403685 ' value='1566404'   \/><label for='answer-id-1566404' id='answer-label-1566404' class=' answer'><span>Use Amazon Athena to query the Amazon CloudWatch logs that are associated with the Lambda function<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-403685[]' id='answer-id-1566405' class='answer   answerof-403685 ' value='1566405'   \/><label for='answer-id-1566405' id='answer-label-1566405' class=' answer'><span>Use Amazon Athena to query the AWS CloudTrail logs that are associated with the Lambda function<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-403685[]' id='answer-id-1566406' class='answer   answerof-403685 ' value='1566406'   \/><label for='answer-id-1566406' id='answer-label-1566406' class=' answer'><span>Use Amazon CloudWatch Logs Insights to query the associated Lambda function logs<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-403685[]' id='answer-id-1566407' class='answer   answerof-403685 ' value='1566407'   \/><label for='answer-id-1566407' id='answer-label-1566407' class=' answer'><span>Use Amazon Elasticsearch Service (Amazon ES) to stream the Amazon CloudWatch logs for the Lambda function<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-3' style=';'><div id='questionWrap-3'  class='   watupro-question-id-403686'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>3. <\/span>A SysOps administrator is building a process for sharing Amazon RDS database snapshots between different accounts associated with different business units within the same company. All data must be encrypted at rest. <br \/>\r<br>How should the administrator implement this process?<\/div><input type='hidden' name='question_id[]' id='qID_3' value='403686' \/><input type='hidden' id='answerType403686' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-403686[]' id='answer-id-1566408' class='answer   answerof-403686 ' value='1566408'   \/><label for='answer-id-1566408' id='answer-label-1566408' class=' answer'><span>Write a script to download the encrypted snapshot, decrypt it using the AWS KMS encryption key used to encrypt the snapshot, then create a new volume in each account.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-403686[]' id='answer-id-1566409' class='answer   answerof-403686 ' value='1566409'   \/><label for='answer-id-1566409' id='answer-label-1566409' class=' answer'><span>Update the key policy to grant permission to the AWS KMS encryption key used to encrypt the snapshot with all relevant accounts, then share the snapshot with those accounts.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-403686[]' id='answer-id-1566410' class='answer   answerof-403686 ' value='1566410'   \/><label for='answer-id-1566410' id='answer-label-1566410' class=' answer'><span>Create an Amazon EC2 instance based on the snapshot, then save the instance's Amazon EBS volume as a snapshot and share it with the other accounts. Require each account owner to create a new volume from that snapshot and encrypt it.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-403686[]' id='answer-id-1566411' class='answer   answerof-403686 ' value='1566411'   \/><label for='answer-id-1566411' id='answer-label-1566411' class=' answer'><span>Create a new unencrypted RDS instance from the encrypted snapshot, connect to the instance using SSH\/RD<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-403686[]' id='answer-id-1566412' class='answer   answerof-403686 ' value='1566412'   \/><label for='answer-id-1566412' id='answer-label-1566412' class=' answer'><span>export the database contents into a file, then share this file with the other accounts.<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-4' style=';'><div id='questionWrap-4'  class='   watupro-question-id-403687'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>4. <\/span>A SysOps administrator has an AWS CloudFormation template of the company's existing infrastructure in us-west-2. The administrator attempts to use the template to launch a new stack in eu-west-1, but the stack only partially deploys, receives an error message, and then rolls back. <br \/>\r<br>Why would this template fail to deploy? (Select TWO.)<\/div><input type='hidden' name='question_id[]' id='qID_4' value='403687' \/><input type='hidden' id='answerType403687' value='checkbox'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-403687[]' id='answer-id-1566413' class='answer   answerof-403687 ' value='1566413'   \/><label for='answer-id-1566413' id='answer-label-1566413' class=' answer'><span>The template referenced an IAM user that is not available in eu-west-1.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-403687[]' id='answer-id-1566414' class='answer   answerof-403687 ' value='1566414'   \/><label for='answer-id-1566414' id='answer-label-1566414' class=' answer'><span>The template referenced an Amazon Machine Image (AMI) that is not available in eu-west-1.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-403687[]' id='answer-id-1566415' class='answer   answerof-403687 ' value='1566415'   \/><label for='answer-id-1566415' id='answer-label-1566415' class=' answer'><span>The template did not have the proper level of permissions to deploy the resources.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-403687[]' id='answer-id-1566416' class='answer   answerof-403687 ' value='1566416'   \/><label for='answer-id-1566416' id='answer-label-1566416' class=' answer'><span>The template requested services that do not exist in eu-west-1.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-403687[]' id='answer-id-1566417' class='answer   answerof-403687 ' value='1566417'   \/><label for='answer-id-1566417' id='answer-label-1566417' class=' answer'><span>CloudFormation templates can be used only to update existing services.<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-5' style=';'><div id='questionWrap-5'  class='   watupro-question-id-403688'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>5. <\/span>A company is using an Amazon DynamoDB table for data. A SysOps administrator must configure replication of the table to another AWS Region for disaster recovery. <br \/>\r<br>What should the SysOps administrator do to meet this requirement?<\/div><input type='hidden' name='question_id[]' id='qID_5' value='403688' \/><input type='hidden' id='answerType403688' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-403688[]' id='answer-id-1566418' class='answer   answerof-403688 ' value='1566418'   \/><label for='answer-id-1566418' id='answer-label-1566418' class=' answer'><span>Enable DynamoDB Accelerator (DAX).<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-403688[]' id='answer-id-1566419' class='answer   answerof-403688 ' value='1566419'   \/><label for='answer-id-1566419' id='answer-label-1566419' class=' answer'><span>Enable DynamoDB Streams, and add a global secondary index (GSI).<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-403688[]' id='answer-id-1566420' class='answer   answerof-403688 ' value='1566420'   \/><label for='answer-id-1566420' id='answer-label-1566420' class=' answer'><span>Enable DynamoDB Streams, and-add a global table Region.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-403688[]' id='answer-id-1566421' class='answer   answerof-403688 ' value='1566421'   \/><label for='answer-id-1566421' id='answer-label-1566421' class=' answer'><span>Enable point-in-time recovery.<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-6' style=';'><div id='questionWrap-6'  class='   watupro-question-id-403689'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>6. <\/span>A company hosts a web portal on Amazon EC2 instances. The web portal uses an Elastic Load Balancer (ELB) and Amazon Route 53 for its public DNS service. The ELB and the EC2 instances are deployed by way of a single AWS CloudFormation stack in the us-east-1 Region. The web portal must be highly available across multiple Regions. <br \/>\r<br>Which configuration will meet these requirements?<\/div><input type='hidden' name='question_id[]' id='qID_6' value='403689' \/><input type='hidden' id='answerType403689' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-403689[]' id='answer-id-1566422' class='answer   answerof-403689 ' value='1566422'   \/><label for='answer-id-1566422' id='answer-label-1566422' class=' answer'><span>Deploy a copy of the stack in the us-west-2 Region. Create a single start of authority (SOA) record in Route 53 that includes the IP address from each EL<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-403689[]' id='answer-id-1566423' class='answer   answerof-403689 ' value='1566423'   \/><label for='answer-id-1566423' id='answer-label-1566423' class=' answer'><span>Configure the SOA record with health checks. Use the ELB in us-east-1 as the primary record and the ELB in us-west-2 as the secondary record.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-403689[]' id='answer-id-1566424' class='answer   answerof-403689 ' value='1566424'   \/><label for='answer-id-1566424' id='answer-label-1566424' class=' answer'><span>Deploy a copy of the stack in the us-west-2 Region. Create an additional A record in Route 53 that includes the ELB in us-west-2 as an alias target. Configure the A records with a failover routing policy and health checks. Use the ELB in us-east-1 as the primary record and the ELB in us-west-2 as the secondary record.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-403689[]' id='answer-id-1566425' class='answer   answerof-403689 ' value='1566425'   \/><label for='answer-id-1566425' id='answer-label-1566425' class=' answer'><span>Deploy a new group of EC2 instances in the us-west-2 Region. Associate the new EC2 instances with the existing ELB, and configure load balancer health checks on all EC2 instances. Configure the ELB to update Route 53 when EC2 instances in us-west-2 fail health checks.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-403689[]' id='answer-id-1566426' class='answer   answerof-403689 ' value='1566426'   \/><label for='answer-id-1566426' id='answer-label-1566426' class=' answer'><span>Deploy a new group of EC2 instances in the us-west-2 Region. Configure EC2 health checks on all EC2 instances in each Region. Configure a peering connection between the VPCs. Use the VPC in us-east-1 as the primary record and the VPC in us-west-2 as the secondary record.<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-7' style=';'><div id='questionWrap-7'  class='   watupro-question-id-403690'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>7. <\/span>A SysOps administrator must set up notifications for whenever combined billing exceeds a certain threshold for all AWS accounts within a company. The administrator has set up AWS Organizations and enabled Consolidated Billing. <br \/>\r<br>Which additional steps must the administrator perform to set up the billing alerts?<\/div><input type='hidden' name='question_id[]' id='qID_7' value='403690' \/><input type='hidden' id='answerType403690' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-403690[]' id='answer-id-1566427' class='answer   answerof-403690 ' value='1566427'   \/><label for='answer-id-1566427' id='answer-label-1566427' class=' answer'><span>In the payer account: Enable billing alerts in the Billing and Cost Management console; publish an Amazon SNS message when the billing alert triggers.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-403690[]' id='answer-id-1566428' class='answer   answerof-403690 ' value='1566428'   \/><label for='answer-id-1566428' id='answer-label-1566428' class=' answer'><span>In each account: Enable billing alerts in the Billing and Cost Management console; set up a billing alarm in Amazon CloudWatch; publish an SNS message when the alarm triggers.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-403690[]' id='answer-id-1566429' class='answer   answerof-403690 ' value='1566429'   \/><label for='answer-id-1566429' id='answer-label-1566429' class=' answer'><span>In the payer account: Enable billing alerts in the Billing and Cost Management console; set up a billing alarm in the Billing and Cost Management console to publish an SNS message when the alarm triggers.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-403690[]' id='answer-id-1566430' class='answer   answerof-403690 ' value='1566430'   \/><label for='answer-id-1566430' id='answer-label-1566430' class=' answer'><span>In the payer account: Enable billing alerts in the Billing and Cost Management console; set up a billing alarm in Amazon CloudWatch; publish an SNS message when the alarm triggers.<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-8' style=';'><div id='questionWrap-8'  class='   watupro-question-id-403691'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>8. <\/span>A company has multiple AWS Site-to-Site VPN connections between a VPC and its branch offices. The company manages an Amazon Elasticsearch Service (Amazon ES) domain that is configured with public access. The Amazon ES domain has an open domain access policy. A SysOps administrator needs to ensure that Amazon ES can be accessed only from the branch offices while preserving existing data. <br \/>\r<br>Which solution will meet these requirements?<\/div><input type='hidden' name='question_id[]' id='qID_8' value='403691' \/><input type='hidden' id='answerType403691' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-403691[]' id='answer-id-1566431' class='answer   answerof-403691 ' value='1566431'   \/><label for='answer-id-1566431' id='answer-label-1566431' class=' answer'><span>Configure an identity-based access policy on Amazon E<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-403691[]' id='answer-id-1566432' class='answer   answerof-403691 ' value='1566432'   \/><label for='answer-id-1566432' id='answer-label-1566432' class=' answer'><span>Add an allow statement to the policy that includes the Amazon Resource Name (ARN) for each branch office VPN connection.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-403691[]' id='answer-id-1566433' class='answer   answerof-403691 ' value='1566433'   \/><label for='answer-id-1566433' id='answer-label-1566433' class=' answer'><span>Configure an IP-based domain access policy on Amazon E<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-403691[]' id='answer-id-1566434' class='answer   answerof-403691 ' value='1566434'   \/><label for='answer-id-1566434' id='answer-label-1566434' class=' answer'><span>Add an allow statement to the policy that includes the private IP CIDR blocks from each branch office network.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-403691[]' id='answer-id-1566435' class='answer   answerof-403691 ' value='1566435'   \/><label for='answer-id-1566435' id='answer-label-1566435' class=' answer'><span>Deploy a new Amazon ES domain in private subnets in a VPC, and import a snapshot from the old domain. Create a security group that allows inbound traffic from the branch office CIDR blocks.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-403691[]' id='answer-id-1566436' class='answer   answerof-403691 ' value='1566436'   \/><label for='answer-id-1566436' id='answer-label-1566436' class=' answer'><span>Reconfigure the Amazon ES domain in private subnets in a VP<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-403691[]' id='answer-id-1566437' class='answer   answerof-403691 ' value='1566437'   \/><label for='answer-id-1566437' id='answer-label-1566437' class=' answer'><span>Create a security group that allows inbound traffic from the branch office CIDR blocks.<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-9' style=';'><div id='questionWrap-9'  class='   watupro-question-id-403692'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>9. <\/span>A large company is using AWS Organizations to manage its multi-account AWS environment. According to company policy, all users should have read-level access to a particular Amazon S3 bucket in a central account. The S3 bucket data should not be available outside the organization. A SysOps administrator must set up the permissions and add a bucket policy to the S3 bucket. <br \/>\r<br>Which parameters should be specified to accomplish this in the MOST efficient manner?<\/div><input type='hidden' name='question_id[]' id='qID_9' value='403692' \/><input type='hidden' id='answerType403692' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-403692[]' id='answer-id-1566438' class='answer   answerof-403692 ' value='1566438'   \/><label for='answer-id-1566438' id='answer-label-1566438' class=' answer'><span>Specify '*' as the principal and PrincipalOrgld as a condition.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-403692[]' id='answer-id-1566439' class='answer   answerof-403692 ' value='1566439'   \/><label for='answer-id-1566439' id='answer-label-1566439' class=' answer'><span>Specify all account numbers as the principal.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-403692[]' id='answer-id-1566440' class='answer   answerof-403692 ' value='1566440'   \/><label for='answer-id-1566440' id='answer-label-1566440' class=' answer'><span>Specify PrincipalOrgld as the principal.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-403692[]' id='answer-id-1566441' class='answer   answerof-403692 ' value='1566441'   \/><label for='answer-id-1566441' id='answer-label-1566441' class=' answer'><span>Specify the organization's management account as the principal.<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-10' style=';'><div id='questionWrap-10'  class='   watupro-question-id-403693'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>10. <\/span>A SysOps administrator is troubleshooting connection timeouts to an Amazon EC2 instance that has a public IP address. The instance has a private IP address of 172.31.16.139. When the SysOps administrator tries to ping the instance's public IP address from the remote IP address 203.0.113.12, the response is &quot;request timed out.&quot;. <br \/>\r<br>The flow logs contain the following information: <br \/>\r<br>What is one cause of the problem?<\/div><input type='hidden' name='question_id[]' id='qID_10' value='403693' \/><input type='hidden' id='answerType403693' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-403693[]' id='answer-id-1566442' class='answer   answerof-403693 ' value='1566442'   \/><label for='answer-id-1566442' id='answer-label-1566442' class=' answer'><span>Inbound security group deny rule<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-403693[]' id='answer-id-1566443' class='answer   answerof-403693 ' value='1566443'   \/><label for='answer-id-1566443' id='answer-label-1566443' class=' answer'><span>Outbound security group deny rule<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-403693[]' id='answer-id-1566444' class='answer   answerof-403693 ' value='1566444'   \/><label for='answer-id-1566444' id='answer-label-1566444' class=' answer'><span>Network ACL inbound rules<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-403693[]' id='answer-id-1566445' class='answer   answerof-403693 ' value='1566445'   \/><label for='answer-id-1566445' id='answer-label-1566445' class=' answer'><span>Network ACL outbound rules<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-11' style=';'><div id='questionWrap-11'  class='   watupro-question-id-403694'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>11. <\/span>A company has multiple Amazon EC2 instances that run a resource-intensive application in a development environment. A SysOps administrator is implementing a solution to stop these EC2 instances when they are not in use. <br \/>\r<br>Which solution will meet this requirement?<\/div><input type='hidden' name='question_id[]' id='qID_11' value='403694' \/><input type='hidden' id='answerType403694' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-403694[]' id='answer-id-1566446' class='answer   answerof-403694 ' value='1566446'   \/><label for='answer-id-1566446' id='answer-label-1566446' class=' answer'><span>Assess AWS CloudTrail logs to verify that there is no EC2 API activity. Invoke an AWS Lambda function to stop the EC2 instances.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-403694[]' id='answer-id-1566447' class='answer   answerof-403694 ' value='1566447'   \/><label for='answer-id-1566447' id='answer-label-1566447' class=' answer'><span>Create an Amazon CloudWatch alarm to stop the EC2 instances when the average CPU utilization is lower than 5% for a 30-minute period.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-403694[]' id='answer-id-1566448' class='answer   answerof-403694 ' value='1566448'   \/><label for='answer-id-1566448' id='answer-label-1566448' class=' answer'><span>Create an Amazon CloudWatch metric to stop the EC2 instances when the VolumeReadBytes metric is lower than 500 for a 30-minute period.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-403694[]' id='answer-id-1566449' class='answer   answerof-403694 ' value='1566449'   \/><label for='answer-id-1566449' id='answer-label-1566449' class=' answer'><span>Use AWS Config to invoke an AWS Lambda function to stop the EC2 instances based on resource configuration changes.<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-12' style=';'><div id='questionWrap-12'  class='   watupro-question-id-403695'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>12. <\/span>A SysOps administrator needs to configure a solution that will deliver digital content to a set of authorized users through Amazon CloudFront. Unauthorized users must be restricted from access. <br \/>\r<br>Which solution will meet these requirements?<\/div><input type='hidden' name='question_id[]' id='qID_12' value='403695' \/><input type='hidden' id='answerType403695' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-403695[]' id='answer-id-1566450' class='answer   answerof-403695 ' value='1566450'   \/><label for='answer-id-1566450' id='answer-label-1566450' class=' answer'><span>Store the digital content in an Amazon S3 bucket that does not have public access blocked. Use signed URLs to access the S3 bucket through CloudFront.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-403695[]' id='answer-id-1566451' class='answer   answerof-403695 ' value='1566451'   \/><label for='answer-id-1566451' id='answer-label-1566451' class=' answer'><span>Store the digital content in an Amazon S3 bucket that has public access blocked. Use an origin access identity (OAI) to deliver the content through CloudFront. Restrict S3 bucket access with signed URLs in CloudFront.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-403695[]' id='answer-id-1566452' class='answer   answerof-403695 ' value='1566452'   \/><label for='answer-id-1566452' id='answer-label-1566452' class=' answer'><span>Store the digital content in an Amazon S3 bucket that has public access blocked. Use an origin access identity (OAI) to deliver the content through CloudFront. Enable field-level encryption.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-403695[]' id='answer-id-1566453' class='answer   answerof-403695 ' value='1566453'   \/><label for='answer-id-1566453' id='answer-label-1566453' class=' answer'><span>Store the digital content in an Amazon S3 bucket that does not have public access blocked. Use signed cookies for restricted delivery of the content through CloudFront.<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-13' style=';'><div id='questionWrap-13'  class='   watupro-question-id-403696'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>13. <\/span>A company has attached the following policy to an IAM user: <br \/>\r<br><br><img decoding=\"async\" width=397 height=432 id=\"\u56fe\u7247 1\" src=\"https:\/\/www.dumpsbase.com\/freedumps\/wp-content\/uploads\/2025\/06\/image005-6.jpg\"><br><br \/>\r<br>Which of the following actions are allowed for the IAM user?<\/div><input type='hidden' name='question_id[]' id='qID_13' value='403696' \/><input type='hidden' id='answerType403696' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-403696[]' id='answer-id-1566454' class='answer   answerof-403696 ' value='1566454'   \/><label for='answer-id-1566454' id='answer-label-1566454' class=' answer'><span>Amazon RDS DescribeDBInstances action in the us-east-1 Region<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-403696[]' id='answer-id-1566455' class='answer   answerof-403696 ' value='1566455'   \/><label for='answer-id-1566455' id='answer-label-1566455' class=' answer'><span>Amazon S3 Putobject operation in a bucket named testbucket<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-403696[]' id='answer-id-1566456' class='answer   answerof-403696 ' value='1566456'   \/><label for='answer-id-1566456' id='answer-label-1566456' class=' answer'><span>Amazon EC2 Describe Instances action in the us-east-1 Region<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-403696[]' id='answer-id-1566457' class='answer   answerof-403696 ' value='1566457'   \/><label for='answer-id-1566457' id='answer-label-1566457' class=' answer'><span>Amazon EC2 AttachNetworkinterf ace action in the eu-west-1 Region<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-14' style=';'><div id='questionWrap-14'  class='   watupro-question-id-403697'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>14. <\/span>A company runs a web application on three Amazon EC2 instances behind an Application Load Balancer (ALB). The company notices that random periods of increased traffic cause a degradation in the application's performance. A SysOps administrator must scale the application to meet the increased traffic. <br \/>\r<br>Which solution meets these requirements?<\/div><input type='hidden' name='question_id[]' id='qID_14' value='403697' \/><input type='hidden' id='answerType403697' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-403697[]' id='answer-id-1566458' class='answer   answerof-403697 ' value='1566458'   \/><label for='answer-id-1566458' id='answer-label-1566458' class=' answer'><span>Create an Amazon CloudWatch alarm to monitor application latency and increase the size of each EC2 instance if the desired threshold is reached.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-403697[]' id='answer-id-1566459' class='answer   answerof-403697 ' value='1566459'   \/><label for='answer-id-1566459' id='answer-label-1566459' class=' answer'><span>Create an Amazon EventBridge (Amazon CloudWatch Events) rule to monitor application latency and add an EC2 instance to the ALB if the desired threshold is reached.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-403697[]' id='answer-id-1566460' class='answer   answerof-403697 ' value='1566460'   \/><label for='answer-id-1566460' id='answer-label-1566460' class=' answer'><span>Deploy the application to an Auto Scaling group of EC2 instances with a target tracking scaling policy. Attach the ALB to the Auto Scaling group.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-403697[]' id='answer-id-1566461' class='answer   answerof-403697 ' value='1566461'   \/><label for='answer-id-1566461' id='answer-label-1566461' class=' answer'><span>Deploy the application to an Auto Scaling group of EC2 instances with a scheduled scaling policy. \r\nAttach the ALB to the Auto Scaling group.<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-15' style=';'><div id='questionWrap-15'  class='   watupro-question-id-403698'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>15. <\/span>A company's public website is hosted in an Amazon S3 bucket in the us-east-1 Region behind an Amazon CloudFront distribution. The company wants to ensure that the website is protected from DDoS attacks. A SysOps administrator needs to deploy a solution that gives the company the ability to maintain control over the rate limit at which DDoS protections are applied. <br \/>\r<br>Which solution will meet these requirements?<\/div><input type='hidden' name='question_id[]' id='qID_15' value='403698' \/><input type='hidden' id='answerType403698' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-403698[]' id='answer-id-1566462' class='answer   answerof-403698 ' value='1566462'   \/><label for='answer-id-1566462' id='answer-label-1566462' class=' answer'><span>Deploy a global-scoped AWS WAF web ACL with an allow default action. Configure an AWS WAF rate-based rule to block matching traffic. Associate the web ACL with the CloudFront distribution.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-403698[]' id='answer-id-1566463' class='answer   answerof-403698 ' value='1566463'   \/><label for='answer-id-1566463' id='answer-label-1566463' class=' answer'><span>Deploy an AWS WAF web ACL with an allow default action in us-east-1. Configure an AWS WAF rate-based rule to block matching traffic. Associate the web ACL with the S3 bucket.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-403698[]' id='answer-id-1566464' class='answer   answerof-403698 ' value='1566464'   \/><label for='answer-id-1566464' id='answer-label-1566464' class=' answer'><span>Deploy a global-scoped AWS WAF web ACL with a block default action. Configure an AWS WAF rate-based rule to allow matching traffic. Associate the web ACL with the CloudFront distribution.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-403698[]' id='answer-id-1566465' class='answer   answerof-403698 ' value='1566465'   \/><label for='answer-id-1566465' id='answer-label-1566465' class=' answer'><span>Deploy an AWS WAF web ACL with a block default action in us-east-1. Configure an AWS WAF rate-based rule to allow matching traffic. Associate the web ACL with the S3 bucket.<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-16' style=';'><div id='questionWrap-16'  class='   watupro-question-id-403699'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>16. <\/span>A company hosts an internal application on Amazon EC2 instances. All application data and requests route through an AWS Site-to-Site VPN connection between the on-premises network and AWS. The company must monitor the application for changes that allow network access outside of the corporate network. Any change that exposes the application externally must be restricted automatically. <br \/>\r<br>Which solution meets these requirements in the MOST operationally efficient manner?<\/div><input type='hidden' name='question_id[]' id='qID_16' value='403699' \/><input type='hidden' id='answerType403699' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-403699[]' id='answer-id-1566466' class='answer   answerof-403699 ' value='1566466'   \/><label for='answer-id-1566466' id='answer-label-1566466' class=' answer'><span>Create an AWS Lambda function that updates security groups that are associated with the elastic network interface to remove inbound rules with noncorporate CIDR ranges. Turn on VPC Flow Logs, and send the logs to Amazon CloudWatch Logs. Create an Amazon CloudWatch alarm that matches traffic from noncorporate CIDR ranges, and publish a message to an Amazon Simple Notification Service (Amazon SNS) topic with the Lambda function as a target.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-403699[]' id='answer-id-1566467' class='answer   answerof-403699 ' value='1566467'   \/><label for='answer-id-1566467' id='answer-label-1566467' class=' answer'><span>Create a scheduled Amazon EventBridge (Amazon CloudWatch Events) rule that targets an AWS Systems Manager Automation document to check for public IP addresses on the EC2 instances. If public IP addresses are found on the EC2 instances, initiate another Systems Manager Automation document to terminate the instances.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-403699[]' id='answer-id-1566468' class='answer   answerof-403699 ' value='1566468'   \/><label for='answer-id-1566468' id='answer-label-1566468' class=' answer'><span>Configure AWS Config and a custom rule to monitor whether a security group allows inbound requests from noncorporate CIDR ranges. Create an AWS Systems Manager Automation document to remove any noncorporate CIDR ranges from the application security groups.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-403699[]' id='answer-id-1566469' class='answer   answerof-403699 ' value='1566469'   \/><label for='answer-id-1566469' id='answer-label-1566469' class=' answer'><span>Configure AWS Config and the managed rule for monitoring public IP associations with the EC2 instances by tag. Tag the EC2 instances with an identifier. Create an AWS Systems Manager Automation document to remove the public IP association from the EC2 instances.<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-17' style=';'><div id='questionWrap-17'  class='   watupro-question-id-403700'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>17. <\/span>A SysOps administrator needs to create alerts that are based on the read and write metrics of Amazon Elastic Block Store (Amazon EBS) volumes that are attached to an Amazon EC2 instance. The SysOps administrator creates and enables Amazon CloudWatch alarms for the DiskReadBytes metric and the DiskWriteBytes metric. <br \/>\r<br>A custom monitoring tool that is installed on the EC2 instance with the same alarm configuration indicates that the volume metrics have exceeded the threshold. However, the CloudWatch alarms were not in ALARM state. <br \/>\r<br>Which action will ensure that the CloudWatch alarms function correctly?<\/div><input type='hidden' name='question_id[]' id='qID_17' value='403700' \/><input type='hidden' id='answerType403700' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-403700[]' id='answer-id-1566470' class='answer   answerof-403700 ' value='1566470'   \/><label for='answer-id-1566470' id='answer-label-1566470' class=' answer'><span>Install and configure the CloudWatch agent on the EC2 instance to capture the desired metrics.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-403700[]' id='answer-id-1566471' class='answer   answerof-403700 ' value='1566471'   \/><label for='answer-id-1566471' id='answer-label-1566471' class=' answer'><span>Install and configure AWS Systems Manager Agent on the EC2 instance to capture the desired metrics.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-403700[]' id='answer-id-1566472' class='answer   answerof-403700 ' value='1566472'   \/><label for='answer-id-1566472' id='answer-label-1566472' class=' answer'><span>Reconfigure the CloudWatch alarms to use the VolumeReadBytes metric and the VolumeWriteBytes metric for the EBS volumes.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-403700[]' id='answer-id-1566473' class='answer   answerof-403700 ' value='1566473'   \/><label for='answer-id-1566473' id='answer-label-1566473' class=' answer'><span>Reconfigure the CloudWatch alarms to use the VolumeReadBytes metric and the VolumeWriteBytes metric for the EC2 instance.<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-18' style=';'><div id='questionWrap-18'  class='   watupro-question-id-403701'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>18. <\/span>A company is partnering with an external vendor to provide data processing services. For this integration, the vendor must host the company's data in an Amazon S3 bucket in the vendor's AWS account. The vendor is allowing the company to provide an AWS Key Management Service (AWS <br \/>\r<br>KMS) key to encrypt the company's data. The vendor has provided an IAM role Amazon Resource Name (ARN) to the company for this integration. <br \/>\r<br>What should a SysOps administrator do to configure this integration?<\/div><input type='hidden' name='question_id[]' id='qID_18' value='403701' \/><input type='hidden' id='answerType403701' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-403701[]' id='answer-id-1566474' class='answer   answerof-403701 ' value='1566474'   \/><label for='answer-id-1566474' id='answer-label-1566474' class=' answer'><span>Create a new KMS key. Add the vendor's IAM role ARN to the KMS key policy. Provide the new KMS key ARN to the vendor.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-403701[]' id='answer-id-1566475' class='answer   answerof-403701 ' value='1566475'   \/><label for='answer-id-1566475' id='answer-label-1566475' class=' answer'><span>Create a new KMS key. Create a new IAM user. Add the vendor's IAM role ARN to an inline policy that is attached to the IAM user. Provide the new IAM user ARN to the vendor.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-403701[]' id='answer-id-1566476' class='answer   answerof-403701 ' value='1566476'   \/><label for='answer-id-1566476' id='answer-label-1566476' class=' answer'><span>Configure encryption using the KMS managed S3 key. Add the vendor's IAM role ARN to the KMS managed S3 key policy. Provide the KMS managed S3 key ARN to the vendor.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-403701[]' id='answer-id-1566477' class='answer   answerof-403701 ' value='1566477'   \/><label for='answer-id-1566477' id='answer-label-1566477' class=' answer'><span>Configure encryption using the KMS managed S3 key. Create an S3 bucket. Add the vendor's IAM role ARN to the S3 bucket policy. Provide the S3 bucket ARN to the vendor.<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-19' style=';'><div id='questionWrap-19'  class='   watupro-question-id-403702'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>19. <\/span>A company has an Auto Scaling group of Amazon EC2 instances that scale based on average CPU utilization. The Auto Scaling group events log indicates an InsufficientlnstanceCapacity error. <br \/>\r<br>Which actions should a SysOps administrator take to remediate this issue? (Select TWO.<\/div><input type='hidden' name='question_id[]' id='qID_19' value='403702' \/><input type='hidden' id='answerType403702' value='checkbox'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-403702[]' id='answer-id-1566478' class='answer   answerof-403702 ' value='1566478'   \/><label for='answer-id-1566478' id='answer-label-1566478' class=' answer'><span>Change the instance type that the company is using.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-403702[]' id='answer-id-1566479' class='answer   answerof-403702 ' value='1566479'   \/><label for='answer-id-1566479' id='answer-label-1566479' class=' answer'><span>Configure the Auto Scaling group in different Availability Zones.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-403702[]' id='answer-id-1566480' class='answer   answerof-403702 ' value='1566480'   \/><label for='answer-id-1566480' id='answer-label-1566480' class=' answer'><span>Configure the Auto Scaling group to use different Amazon Elastic Block Store (Amazon EBS) volume sizes.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-403702[]' id='answer-id-1566481' class='answer   answerof-403702 ' value='1566481'   \/><label for='answer-id-1566481' id='answer-label-1566481' class=' answer'><span>Increase the maximum size of the Auto Scaling group.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-403702[]' id='answer-id-1566482' class='answer   answerof-403702 ' value='1566482'   \/><label for='answer-id-1566482' id='answer-label-1566482' class=' answer'><span>Request an increase in the instance service quota.<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-20' style=';'><div id='questionWrap-20'  class='   watupro-question-id-403703'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>20. <\/span>A company stores files on 50 Amazon S3 buckets in the same AWS Region. The company wants to connect to the S3 buckets securely over a private connection from its Amazon EC2 instances. The company needs a solution that produces no additional cost. <br \/>\r<br>Which solution will meet these requirements?<\/div><input type='hidden' name='question_id[]' id='qID_20' value='403703' \/><input type='hidden' id='answerType403703' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-403703[]' id='answer-id-1566483' class='answer   answerof-403703 ' value='1566483'   \/><label for='answer-id-1566483' id='answer-label-1566483' class=' answer'><span>Create a gateway VPC endpoint for each S3 bucket. Attach the gateway VPC endpoints to each subnet inside the VP<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-403703[]' id='answer-id-1566484' class='answer   answerof-403703 ' value='1566484'   \/><label for='answer-id-1566484' id='answer-label-1566484' class=' answer'><span>Create an interface VPC endpoint for each S3 bucket. Attach the interface VPC endpoints to each subnet inside the VP<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-403703[]' id='answer-id-1566485' class='answer   answerof-403703 ' value='1566485'   \/><label for='answer-id-1566485' id='answer-label-1566485' class=' answer'><span>Create one gateway VPC endpoint for all the S3 buckets. Add the gateway VPC endpoint to the VPC route table.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-403703[]' id='answer-id-1566486' class='answer   answerof-403703 ' value='1566486'   \/><label for='answer-id-1566486' id='answer-label-1566486' class=' answer'><span>Create one interface VPC endpoint for all the S3 buckets. Add the interface VPC endpoint to the VPC route table.<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-21' style=';'><div id='questionWrap-21'  class='   watupro-question-id-403704'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>21. <\/span>A company has a VPC with public and private subnets. An Amazon EC2 based application resides in the private subnets and needs to process raw .csv files stored in an Amazon S3 bucket. A SysOps administrator has set up the correct IAM role with the required permissions for the application to access the S3 bucket, but the application is unable to communicate with the S3 bucket. <br \/>\r<br>Which action will solve this problem while adhering to least privilege access?<\/div><input type='hidden' name='question_id[]' id='qID_21' value='403704' \/><input type='hidden' id='answerType403704' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-403704[]' id='answer-id-1566487' class='answer   answerof-403704 ' value='1566487'   \/><label for='answer-id-1566487' id='answer-label-1566487' class=' answer'><span>Add a bucket policy to the S3 bucket permitting access from the IAM role.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-403704[]' id='answer-id-1566488' class='answer   answerof-403704 ' value='1566488'   \/><label for='answer-id-1566488' id='answer-label-1566488' class=' answer'><span>Attach an S3 gateway endpoint to the VP<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-403704[]' id='answer-id-1566489' class='answer   answerof-403704 ' value='1566489'   \/><label for='answer-id-1566489' id='answer-label-1566489' class=' answer'><span>Configure the route table for the private subnet.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-403704[]' id='answer-id-1566490' class='answer   answerof-403704 ' value='1566490'   \/><label for='answer-id-1566490' id='answer-label-1566490' class=' answer'><span>Configure the route table to allow the instances on the private subnet access through the internet gateway.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-403704[]' id='answer-id-1566491' class='answer   answerof-403704 ' value='1566491'   \/><label for='answer-id-1566491' id='answer-label-1566491' class=' answer'><span>Create a NAT gateway in a private subnet and configure the route table for the private subnets.<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-22' style=';'><div id='questionWrap-22'  class='   watupro-question-id-403705'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>22. <\/span>A large company is using AWS Organizations to manage hundreds of AWS accounts across multiple AWS Regions. The company has turned on AWS Config throughout the organization. <br \/>\r<br>The company requires all Amazon S3 buckets to block public read access. A SysOps administrator must generate a monthly report that shows all the S3 buckets and whether they comply with this requirement. <br \/>\r<br>Which combination of steps should the SysOps administrator take to collect this data? {Select TWO).<\/div><input type='hidden' name='question_id[]' id='qID_22' value='403705' \/><input type='hidden' id='answerType403705' value='checkbox'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-403705[]' id='answer-id-1566492' class='answer   answerof-403705 ' value='1566492'   \/><label for='answer-id-1566492' id='answer-label-1566492' class=' answer'><span>Create an AWS Config aggregator in an aggregator account. Use the organization as the source. \r\nRetrieve the compliance data from the aggregator.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-403705[]' id='answer-id-1566493' class='answer   answerof-403705 ' value='1566493'   \/><label for='answer-id-1566493' id='answer-label-1566493' class=' answer'><span>Create an AWS Config aggregator in each account. Use an S3 bucket in an aggregator account as the destination. Retrieve the compliance data from the S3 bucket<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-403705[]' id='answer-id-1566494' class='answer   answerof-403705 ' value='1566494'   \/><label for='answer-id-1566494' id='answer-label-1566494' class=' answer'><span>Edit the AWS Config policy in AWS Organizations. Use the organization's management account to turn on the s3-bucket-public-read-prohibited rule for the entire organization.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-403705[]' id='answer-id-1566495' class='answer   answerof-403705 ' value='1566495'   \/><label for='answer-id-1566495' id='answer-label-1566495' class=' answer'><span>Use the AWS Config compliance report from the organization's management account. Filter the results by resource, and select Amazon S3.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-403705[]' id='answer-id-1566496' class='answer   answerof-403705 ' value='1566496'   \/><label for='answer-id-1566496' id='answer-label-1566496' class=' answer'><span>Use the AWS Config API to apply the s3-bucket-public-read-prohibited rule in all accounts for all available Regions.<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-23' style=';'><div id='questionWrap-23'  class='   watupro-question-id-403706'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>23. <\/span>A SysOps administrator launches an Amazon EC2 Linux instance in a public subnet. When the instance is running, the SysOps administrator obtains the public IP address and attempts to remotely connect to the instance multiple times. However, the SysOps administrator always receives a timeout error. <br \/>\r<br>Which action will allow the SysOps administrator to remotely connect to the instance?<\/div><input type='hidden' name='question_id[]' id='qID_23' value='403706' \/><input type='hidden' id='answerType403706' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-403706[]' id='answer-id-1566497' class='answer   answerof-403706 ' value='1566497'   \/><label for='answer-id-1566497' id='answer-label-1566497' class=' answer'><span>Add a route table entry in the public subnet for the SysOps administrator's IP address.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-403706[]' id='answer-id-1566498' class='answer   answerof-403706 ' value='1566498'   \/><label for='answer-id-1566498' id='answer-label-1566498' class=' answer'><span>Add an outbound network ACL rule to allow TCP port 22 for the SysOps administrator's IP address.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-403706[]' id='answer-id-1566499' class='answer   answerof-403706 ' value='1566499'   \/><label for='answer-id-1566499' id='answer-label-1566499' class=' answer'><span>Modify the instance security group to allow inbound SSH traffic from the SysOps administrator's IP address.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-403706[]' id='answer-id-1566500' class='answer   answerof-403706 ' value='1566500'   \/><label for='answer-id-1566500' id='answer-label-1566500' class=' answer'><span>Modify the instance security group to allow outbound SSH traffic to the SysOps administrator's IP address.<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-24' style=';'><div id='questionWrap-24'  class='   watupro-question-id-403707'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>24. <\/span>A recent organizational audit uncovered an existing Amazon RDS database that is not currently configured for high availability. Given the critical nature of this database, it must be configured for high availability as soon as possible. <br \/>\r<br>How can this requirement be met?<\/div><input type='hidden' name='question_id[]' id='qID_24' value='403707' \/><input type='hidden' id='answerType403707' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-403707[]' id='answer-id-1566501' class='answer   answerof-403707 ' value='1566501'   \/><label for='answer-id-1566501' id='answer-label-1566501' class=' answer'><span>Switch to an active\/passive database pair using the create-db-instance-read-replica with the -- availability-zone flag.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-403707[]' id='answer-id-1566502' class='answer   answerof-403707 ' value='1566502'   \/><label for='answer-id-1566502' id='answer-label-1566502' class=' answer'><span>Specify high availability when creating a new RDS instance, and live-migrate the data.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-403707[]' id='answer-id-1566503' class='answer   answerof-403707 ' value='1566503'   \/><label for='answer-id-1566503' id='answer-label-1566503' class=' answer'><span>Modify the RDS instance using the console to include the Multi-AZ option.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-403707[]' id='answer-id-1566504' class='answer   answerof-403707 ' value='1566504'   \/><label for='answer-id-1566504' id='answer-label-1566504' class=' answer'><span>Use the modify-db-instance command with the --na flag.<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-25' style=';'><div id='questionWrap-25'  class='   watupro-question-id-403708'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>25. <\/span>A SysOps administrator noticed that the cache hit ratio for an Amazon CloudFront distribution is less than 10%. <br \/>\r<br>Which collection of configuration changes will increase the cache hit ratio for the distribution? (Select TWO.)<\/div><input type='hidden' name='question_id[]' id='qID_25' value='403708' \/><input type='hidden' id='answerType403708' value='checkbox'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-403708[]' id='answer-id-1566505' class='answer   answerof-403708 ' value='1566505'   \/><label for='answer-id-1566505' id='answer-label-1566505' class=' answer'><span>Ensure that only required cookies, query strings, and headers are forwarded in the Cache Behavior Settings.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-403708[]' id='answer-id-1566506' class='answer   answerof-403708 ' value='1566506'   \/><label for='answer-id-1566506' id='answer-label-1566506' class=' answer'><span>Change the Viewer Protocol Policy to use HTTPS only.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-403708[]' id='answer-id-1566507' class='answer   answerof-403708 ' value='1566507'   \/><label for='answer-id-1566507' id='answer-label-1566507' class=' answer'><span>Configure the distribution to use presigned cookies and URLs to restrict access to the distribution.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-403708[]' id='answer-id-1566508' class='answer   answerof-403708 ' value='1566508'   \/><label for='answer-id-1566508' id='answer-label-1566508' class=' answer'><span>Enable automatic compression of objects in the Cache Behavior Settings.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-403708[]' id='answer-id-1566509' class='answer   answerof-403708 ' value='1566509'   \/><label for='answer-id-1566509' id='answer-label-1566509' class=' answer'><span>Increase the CloudFront time to live (TTL) settings in the Cache Behavior Settings.<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-26' style=';'><div id='questionWrap-26'  class='   watupro-question-id-403709'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>26. <\/span>A company has mandated the use of multi-factor authentication (MFA) for all IAM users, and requires users to make all API calls using the CLI. However. users are not prompted to enter MFA tokens, and are able to run CLI commands without MF<br \/>\r\n<br \/>\r\nA. In an attempt to enforce MFA, the company attached an IAM policy to all users that denies API calls that have not been authenticated with MFA.<br \/>\r\n<br \/>\r\nWhat additional step must be taken to ensure that API calls are authenticated using MFA?<\/div><input type='hidden' name='question_id[]' id='qID_26' value='403709' \/><input type='hidden' id='answerType403709' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-403709[]' id='answer-id-1566510' class='answer   answerof-403709 ' value='1566510'   \/><label for='answer-id-1566510' id='answer-label-1566510' class=' answer'><span>Enable MFA on IAM roles, and require IAM users to use role credentials to sign API calls.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-403709[]' id='answer-id-1637759' class='answer   answerof-403709 ' value='1637759'   \/><label for='answer-id-1637759' id='answer-label-1637759' class=' answer'><span>Ask the IAM users to log into the AWS Management Console with MFA before making API calls using the CLI.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-403709[]' id='answer-id-1637760' class='answer   answerof-403709 ' value='1637760'   \/><label for='answer-id-1637760' id='answer-label-1637760' class=' answer'><span>Restrict the IAM users to use of the console, as MFA is not supported for CLI use.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-403709[]' id='answer-id-1637761' class='answer   answerof-403709 ' value='1637761'   \/><label for='answer-id-1637761' id='answer-label-1637761' class=' answer'><span>Require users to use temporary credentials from the get-session token command to sign API calls.<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-27' style=';'><div id='questionWrap-27'  class='   watupro-question-id-403710'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>27. <\/span>A company is running a flash sale on its website. The website is hosted on burstable performance Amazon EC2 instances in an Auto Scaling group. The Auto Scaling group is configured to launch instances when the CPU utilization is above 70%. <br \/>\r<br>A couple of hours into the sale, users report slow load times and error messages for refused connections. A SysOps administrator reviews Amazon CloudWatch metrics and notices that the CPU utilization is at 20% across the entire fleet of instances. <br \/>\r<br>The SysOps administrator must restore the website's functionality without making changes to the network infrastructure. <br \/>\r<br>Which solution will meet these requirements?<\/div><input type='hidden' name='question_id[]' id='qID_27' value='403710' \/><input type='hidden' id='answerType403710' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-403710[]' id='answer-id-1566511' class='answer   answerof-403710 ' value='1566511'   \/><label for='answer-id-1566511' id='answer-label-1566511' class=' answer'><span>Activate unlimited mode for the instances in the Auto Scaling group.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-403710[]' id='answer-id-1566512' class='answer   answerof-403710 ' value='1566512'   \/><label for='answer-id-1566512' id='answer-label-1566512' class=' answer'><span>Implement an Amazon CloudFront distribution to offload the traffic from the Auto Scaling group.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-403710[]' id='answer-id-1566513' class='answer   answerof-403710 ' value='1566513'   \/><label for='answer-id-1566513' id='answer-label-1566513' class=' answer'><span>Move the website to a different AWS Region that is closer to the users.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-403710[]' id='answer-id-1566514' class='answer   answerof-403710 ' value='1566514'   \/><label for='answer-id-1566514' id='answer-label-1566514' class=' answer'><span>Reduce the desired size of the Auto Scaling group to artificially increase CPU average utilization.<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-28' style=';'><div id='questionWrap-28'  class='   watupro-question-id-403711'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>28. <\/span>A gaming application is deployed on four Amazon EC2 instances in a default VPC. The SysOps administrator has noticed consistently high latency in responses as data is transferred among the four instances. There is no way for the administrator to alter the application code. <br \/>\r<br>The MOST effective way to reduce latency is to relaunch the EC2 instances in:<\/div><input type='hidden' name='question_id[]' id='qID_28' value='403711' \/><input type='hidden' id='answerType403711' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-403711[]' id='answer-id-1566515' class='answer   answerof-403711 ' value='1566515'   \/><label for='answer-id-1566515' id='answer-label-1566515' class=' answer'><span>a dedicated VP<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-403711[]' id='answer-id-1566516' class='answer   answerof-403711 ' value='1566516'   \/><label for='answer-id-1566516' id='answer-label-1566516' class=' answer'><span>a single subnet inside the VP<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-403711[]' id='answer-id-1566517' class='answer   answerof-403711 ' value='1566517'   \/><label for='answer-id-1566517' id='answer-label-1566517' class=' answer'><span>a placement group.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-403711[]' id='answer-id-1566518' class='answer   answerof-403711 ' value='1566518'   \/><label for='answer-id-1566518' id='answer-label-1566518' class=' answer'><span>a single Availability Zone.<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-29' style=';'><div id='questionWrap-29'  class='   watupro-question-id-403712'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>29. <\/span>A company uses AWS Organizations to manage multiple AWS accounts with consolidated billing enabled. Organization member account owners want the benefits of Reserved Instances (RIs) but do not want to share RIs with other accounts. <br \/>\r<br>Which solution will meet these requirements?<\/div><input type='hidden' name='question_id[]' id='qID_29' value='403712' \/><input type='hidden' id='answerType403712' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-403712[]' id='answer-id-1566519' class='answer   answerof-403712 ' value='1566519'   \/><label for='answer-id-1566519' id='answer-label-1566519' class=' answer'><span>Purchase RIs in individual member accounts. Disable Rl discount sharing in the management account.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-403712[]' id='answer-id-1566520' class='answer   answerof-403712 ' value='1566520'   \/><label for='answer-id-1566520' id='answer-label-1566520' class=' answer'><span>Purchase RIs in individual member accounts. Disable Rl discount sharing in the member accounts.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-403712[]' id='answer-id-1566521' class='answer   answerof-403712 ' value='1566521'   \/><label for='answer-id-1566521' id='answer-label-1566521' class=' answer'><span>Purchase RIs in the management account. Disable Rl discount sharing in the management account.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-403712[]' id='answer-id-1566522' class='answer   answerof-403712 ' value='1566522'   \/><label for='answer-id-1566522' id='answer-label-1566522' class=' answer'><span>Purchase RIs in the management account. Disable Rl discount sharing in the member accounts.<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-30' style=';'><div id='questionWrap-30'  class='   watupro-question-id-403713'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>30. <\/span>An errant process is known to use an entire processor and run at 100%. A SysOps administrator wants to automate restarting the instance once the problem occurs for more than 2 minutes. <br \/>\r<br>How can this be accomplished?<\/div><input type='hidden' name='question_id[]' id='qID_30' value='403713' \/><input type='hidden' id='answerType403713' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-403713[]' id='answer-id-1566523' class='answer   answerof-403713 ' value='1566523'   \/><label for='answer-id-1566523' id='answer-label-1566523' class=' answer'><span>Create an Amazon CloudWatch alarm for the Amazon EC2 instance with basic monitoring. Enable an action to restart the instance.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-403713[]' id='answer-id-1566524' class='answer   answerof-403713 ' value='1566524'   \/><label for='answer-id-1566524' id='answer-label-1566524' class=' answer'><span>Create a CloudWatch alarm for the EC2 instance with detailed monitoring. Enable an action to restart the instance.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-403713[]' id='answer-id-1566525' class='answer   answerof-403713 ' value='1566525'   \/><label for='answer-id-1566525' id='answer-label-1566525' class=' answer'><span>Create an AWS Lambda function to restart the EC2 instance, triggered on a scheduled basis every 2 minutes.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-403713[]' id='answer-id-1566526' class='answer   answerof-403713 ' value='1566526'   \/><label for='answer-id-1566526' id='answer-label-1566526' class=' answer'><span>Create a Lambda function to restart the EC2 instance, triggered by EC2 health checks.<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-31' style=';'><div id='questionWrap-31'  class='   watupro-question-id-403714'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>31. <\/span>A company is expanding its fleet of Amazon EC2 instances before an expected increase of traffic. When a SysOps administrator attempts to add more instances, an InstanceLimitExceeded error is returned. <br \/>\r<br>What should the SysOps administrator do to resolve this error?<\/div><input type='hidden' name='question_id[]' id='qID_31' value='403714' \/><input type='hidden' id='answerType403714' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-403714[]' id='answer-id-1566527' class='answer   answerof-403714 ' value='1566527'   \/><label for='answer-id-1566527' id='answer-label-1566527' class=' answer'><span>Add an additional CIDR block to the VP<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-403714[]' id='answer-id-1566528' class='answer   answerof-403714 ' value='1566528'   \/><label for='answer-id-1566528' id='answer-label-1566528' class=' answer'><span>Launch the EC2 instances in a different Availability Zone.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-403714[]' id='answer-id-1566529' class='answer   answerof-403714 ' value='1566529'   \/><label for='answer-id-1566529' id='answer-label-1566529' class=' answer'><span>Launch new EC2 instances in another VP<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-403714[]' id='answer-id-1566530' class='answer   answerof-403714 ' value='1566530'   \/><label for='answer-id-1566530' id='answer-label-1566530' class=' answer'><span>Use Service Quotas to request an EC2 quota increase.<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-32' style=';'><div id='questionWrap-32'  class='   watupro-question-id-403715'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>32. <\/span>A company hosts its website on Amazon EC2 instances behind an Application Load Balancer. The company manages its DNS with Amazon Route 53. and wants to point its domain's zone apex to the website. <br \/>\r<br>Which type of record should be used to meet these requirements?<\/div><input type='hidden' name='question_id[]' id='qID_32' value='403715' \/><input type='hidden' id='answerType403715' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-403715[]' id='answer-id-1566531' class='answer   answerof-403715 ' value='1566531'   \/><label for='answer-id-1566531' id='answer-label-1566531' class=' answer'><span>A CNAME record for the domain's zone apex<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-403715[]' id='answer-id-1566532' class='answer   answerof-403715 ' value='1566532'   \/><label for='answer-id-1566532' id='answer-label-1566532' class=' answer'><span>An A record for the domain's zone apex<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-403715[]' id='answer-id-1566533' class='answer   answerof-403715 ' value='1566533'   \/><label for='answer-id-1566533' id='answer-label-1566533' class=' answer'><span>An AAAA record for the domain's zone apex<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-403715[]' id='answer-id-1566534' class='answer   answerof-403715 ' value='1566534'   \/><label for='answer-id-1566534' id='answer-label-1566534' class=' answer'><span>An alias record for the domain's zone apex<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-33' style=';'><div id='questionWrap-33'  class='   watupro-question-id-403716'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>33. <\/span>A company has launched a social media website that gives users the ability to upload images directly to a centralized Amazon S3 bucket. The website is popular in areas that are geographically distant from the AWS Region where the S3 bucket is located. Users are reporting that uploads are slow. A SysOps administrator must improve the upload speed. <br \/>\r<br>What should the SysOps administrator do to meet these requirements?<\/div><input type='hidden' name='question_id[]' id='qID_33' value='403716' \/><input type='hidden' id='answerType403716' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-403716[]' id='answer-id-1566535' class='answer   answerof-403716 ' value='1566535'   \/><label for='answer-id-1566535' id='answer-label-1566535' class=' answer'><span>Create S3 access points in Regions that are closer to the users.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-403716[]' id='answer-id-1566536' class='answer   answerof-403716 ' value='1566536'   \/><label for='answer-id-1566536' id='answer-label-1566536' class=' answer'><span>Create an accelerator in AWS Global Accelerator for the S3 bucket.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-403716[]' id='answer-id-1566537' class='answer   answerof-403716 ' value='1566537'   \/><label for='answer-id-1566537' id='answer-label-1566537' class=' answer'><span>Enable S3 Transfer Acceleration on the S3 bucket.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-403716[]' id='answer-id-1566538' class='answer   answerof-403716 ' value='1566538'   \/><label for='answer-id-1566538' id='answer-label-1566538' class=' answer'><span>Enable cross-origin resource sharing (CORS) on the S3 bucket.<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-34' style=';'><div id='questionWrap-34'  class='   watupro-question-id-403717'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>34. <\/span>A company hosts an online shopping portal in the AWS Cloud. The portal provides HTTPS security by using a TLS certificate on an Elastic Load Balancer (ELB). Recently, the portal suffered an outage because the TLS certificate expired. A SysOps administrator must create a solution to automatically renew certificates to avoid this issue in the future. <br \/>\r<br>What is the MOST operationally efficient solution that meets these requirements?<\/div><input type='hidden' name='question_id[]' id='qID_34' value='403717' \/><input type='hidden' id='answerType403717' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-403717[]' id='answer-id-1566539' class='answer   answerof-403717 ' value='1566539'   \/><label for='answer-id-1566539' id='answer-label-1566539' class=' answer'><span>Request a public certificate by using AWS Certificate Manager (ACM). Associate the certificate from ACM with the EL<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-403717[]' id='answer-id-1566540' class='answer   answerof-403717 ' value='1566540'   \/><label for='answer-id-1566540' id='answer-label-1566540' class=' answer'><span>Write a scheduled AWS Lambda function to renew the certificate every 18 months.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-403717[]' id='answer-id-1566541' class='answer   answerof-403717 ' value='1566541'   \/><label for='answer-id-1566541' id='answer-label-1566541' class=' answer'><span>Request a public certificate by using AWS Certificate Manager (ACM). Associate the certificate from ACM with the EL<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-403717[]' id='answer-id-1566542' class='answer   answerof-403717 ' value='1566542'   \/><label for='answer-id-1566542' id='answer-label-1566542' class=' answer'><span>ACM will automatically manage the renewal of the certificate.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-403717[]' id='answer-id-1566543' class='answer   answerof-403717 ' value='1566543'   \/><label for='answer-id-1566543' id='answer-label-1566543' class=' answer'><span>Register a certificate with a third-party certificate authority (CA). Import this certificate into AWS Certificate Manager (ACM). Associate the certificate from ACM with the EL<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-403717[]' id='answer-id-1566544' class='answer   answerof-403717 ' value='1566544'   \/><label for='answer-id-1566544' id='answer-label-1566544' class=' answer'><span>ACM will automatically manage the renewal of the certificate.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-403717[]' id='answer-id-1566545' class='answer   answerof-403717 ' value='1566545'   \/><label for='answer-id-1566545' id='answer-label-1566545' class=' answer'><span>Register a certificate with a third-party certificate authority (CA). Configure the ELB to import the certificate directly from the C<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-403717[]' id='answer-id-1566546' class='answer   answerof-403717 ' value='1566546'   \/><label for='answer-id-1566546' id='answer-label-1566546' class=' answer'><span>Set the certificate refresh cycle on the ELB to refresh when the certificate is within 3 months of the expiration date.<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-35' style=';'><div id='questionWrap-35'  class='   watupro-question-id-403718'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>35. <\/span>A new application runs on Amazon EC2 instances and accesses data in an Amazon RDS database instance. When fully deployed in production, the application fails. The database can be queried from a console on a bastion host. <br \/>\r<br>When looking at the web server logs, the following error is repeated multiple times: <br \/>\r<br>&quot;** Error Establishing a Database Connection <br \/>\r<br>Which of the following may be causes of the connectivity problems? {Select TWO.)<\/div><input type='hidden' name='question_id[]' id='qID_35' value='403718' \/><input type='hidden' id='answerType403718' value='checkbox'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-403718[]' id='answer-id-1566547' class='answer   answerof-403718 ' value='1566547'   \/><label for='answer-id-1566547' id='answer-label-1566547' class=' answer'><span>The security group for the database does not have the appropriate egress rule from the database to the web server.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-403718[]' id='answer-id-1566548' class='answer   answerof-403718 ' value='1566548'   \/><label for='answer-id-1566548' id='answer-label-1566548' class=' answer'><span>The certificate used by the web server is not trusted by the RDS instance.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-403718[]' id='answer-id-1566549' class='answer   answerof-403718 ' value='1566549'   \/><label for='answer-id-1566549' id='answer-label-1566549' class=' answer'><span>The security group for the database does not have the appropriate ingress rule from the web server to the database.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-403718[]' id='answer-id-1566550' class='answer   answerof-403718 ' value='1566550'   \/><label for='answer-id-1566550' id='answer-label-1566550' class=' answer'><span>The port used by the application developer does not match the port specified in the RDS configuration.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-403718[]' id='answer-id-1566551' class='answer   answerof-403718 ' value='1566551'   \/><label for='answer-id-1566551' id='answer-label-1566551' class=' answer'><span>The database is still being created and is not available for connectivity.<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-36' style=';'><div id='questionWrap-36'  class='   watupro-question-id-403719'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>36. <\/span>A manufacturing company uses an Amazon RDS DB instance to store inventory of all stock items. The company maintains several AWS Lambda functions that interact with the database to add, update, and delete items. The Lambda functions use hardcoded credentials to connect to the database. <br \/>\r<br>A SysOps administrator must ensure that the database credentials are never stored in plaintext and that the password is rotated every 30 days. <br \/>\r<br>Which solution will meet these requirements in the MOST operationally efficient manner?<\/div><input type='hidden' name='question_id[]' id='qID_36' value='403719' \/><input type='hidden' id='answerType403719' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-403719[]' id='answer-id-1566552' class='answer   answerof-403719 ' value='1566552'   \/><label for='answer-id-1566552' id='answer-label-1566552' class=' answer'><span>Store the database password as an environment variable for each Lambda function. Create a new Lambda function that is namedPasswordRotate. Use Amazon EventBridge (Amazon CloudWatch Events) to schedule the PasswordRotate function every 30 days to change the database password and update the environment variable for each Lambda function.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-403719[]' id='answer-id-1566553' class='answer   answerof-403719 ' value='1566553'   \/><label for='answer-id-1566553' id='answer-label-1566553' class=' answer'><span>Use AWS Key Management Service (AWS KMS) to encrypt the database password and to store the encrypted password as an environmentvariable for each Lambda function. Grant each Lambda function access to the KMS key so that the database password can be decrypted when required. Create a new Lambda function that is named PasswordRotate to change the password every 30 days.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-403719[]' id='answer-id-1566554' class='answer   answerof-403719 ' value='1566554'   \/><label for='answer-id-1566554' id='answer-label-1566554' class=' answer'><span>Use AWS Secrets Manager to store credentials for the database. Create a Secrets Manager secret, and select the database so that Secrets Manager will use a Lambda function to update the database password automatically. Specify an automatic rotation schedule of 30 days. Update each Lambda function to access the database password from SecretsManager.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-403719[]' id='answer-id-1566555' class='answer   answerof-403719 ' value='1566555'   \/><label for='answer-id-1566555' id='answer-label-1566555' class=' answer'><span>Use AWS Systems Manager Parameter Store to create a secure string to store credentials for the database. Create a new Lambda function called PasswordRotate. Use Amazon EventBridge (Amazon CloudWatch Events) to schedule the PasswordRotate function every 30 days to change the database password and to update the secret within Parameter Store. Update each Lambda function to access the database password from Parameter Store.<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-37' style=';'><div id='questionWrap-37'  class='   watupro-question-id-403720'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>37. <\/span>A company manages an application that uses Amazon ElastiCache for Redis with two extra-large nodes spread across two different Availability Zones. The company's IT team discovers that the ElastiCache for Redis cluster has 75% freeable memory. The application must maintain high availability. <br \/>\r<br>What is the MOST cost-effective way to resize the cluster?<\/div><input type='hidden' name='question_id[]' id='qID_37' value='403720' \/><input type='hidden' id='answerType403720' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-403720[]' id='answer-id-1566556' class='answer   answerof-403720 ' value='1566556'   \/><label for='answer-id-1566556' id='answer-label-1566556' class=' answer'><span>Decrease the number of nodes in the ElastiCache for Redis cluster from 2 to 1.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-403720[]' id='answer-id-1566557' class='answer   answerof-403720 ' value='1566557'   \/><label for='answer-id-1566557' id='answer-label-1566557' class=' answer'><span>Deploy a new ElastiCache for Redis cluster that uses large node types. Migrate the data from the original cluster to the new cluster. After the process is complete, shut down the original duster.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-403720[]' id='answer-id-1566558' class='answer   answerof-403720 ' value='1566558'   \/><label for='answer-id-1566558' id='answer-label-1566558' class=' answer'><span>Deploy a new ElastiCache for Redis cluster that uses large node types. Take a backup from the original cluster, and restore the backup in the new cluster. After the process is complete, shut down the original cluster.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-403720[]' id='answer-id-1566559' class='answer   answerof-403720 ' value='1566559'   \/><label for='answer-id-1566559' id='answer-label-1566559' class=' answer'><span>Perform an online resizing for the ElastiCache for Redis cluster. Change the node types from extra-large nodes to large nodes.<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-38' style=';'><div id='questionWrap-38'  class='   watupro-question-id-403721'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>38. <\/span>A company is releasing a new static website hosted on Amazon S3. The static website hosting feature was enabled on the bucket and content was uploaded: however, upon navigating to the site, the following error message is received: <br \/>\r<br>403 Forbidden - Access Denied <br \/>\r<br>What change should be made to fix this error?<\/div><input type='hidden' name='question_id[]' id='qID_38' value='403721' \/><input type='hidden' id='answerType403721' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-403721[]' id='answer-id-1566560' class='answer   answerof-403721 ' value='1566560'   \/><label for='answer-id-1566560' id='answer-label-1566560' class=' answer'><span>Add a bucket policy that grants everyone read access to the bucket.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-403721[]' id='answer-id-1566561' class='answer   answerof-403721 ' value='1566561'   \/><label for='answer-id-1566561' id='answer-label-1566561' class=' answer'><span>Add a bucket policy that grants everyone read access to the bucket objects.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-403721[]' id='answer-id-1566562' class='answer   answerof-403721 ' value='1566562'   \/><label for='answer-id-1566562' id='answer-label-1566562' class=' answer'><span>Remove the default bucket policy that denies read access to the bucket.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-403721[]' id='answer-id-1566563' class='answer   answerof-403721 ' value='1566563'   \/><label for='answer-id-1566563' id='answer-label-1566563' class=' answer'><span>Configure cross-origin resource sharing (CORS) on the bucket.<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-39' style=';'><div id='questionWrap-39'  class='   watupro-question-id-403722'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>39. <\/span>A large multinational company has a core application that runs 24 hours a day, 7 days a week on Amazon EC2 and AWS Lambda. The company uses a combination of operating systems across different AWS Regions. The company wants to achieve cost savings and wants to use a pricing model that provides the most flexibility. <br \/>\r<br>What should the company do to MAXIMIZE cost savings while meeting these requirements?<\/div><input type='hidden' name='question_id[]' id='qID_39' value='403722' \/><input type='hidden' id='answerType403722' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-403722[]' id='answer-id-1566564' class='answer   answerof-403722 ' value='1566564'   \/><label for='answer-id-1566564' id='answer-label-1566564' class=' answer'><span>Establish the compute expense by the hour. Purchase a Compute Savings Plan.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-403722[]' id='answer-id-1566565' class='answer   answerof-403722 ' value='1566565'   \/><label for='answer-id-1566565' id='answer-label-1566565' class=' answer'><span>Establish the compute expense by the hour. Purchase an EC2 Instance Savings Plan.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-403722[]' id='answer-id-1566566' class='answer   answerof-403722 ' value='1566566'   \/><label for='answer-id-1566566' id='answer-label-1566566' class=' answer'><span>Purchase a Reserved Instance for the instance types, operating systems, Region, and tenancy.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-403722[]' id='answer-id-1566567' class='answer   answerof-403722 ' value='1566567'   \/><label for='answer-id-1566567' id='answer-label-1566567' class=' answer'><span>Use EC2 Spot Instances to match the instances that run in each Region.<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-40' style=';'><div id='questionWrap-40'  class='   watupro-question-id-403723'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>40. <\/span>A company has a stateful web application that is hosted on Amazon EC2 instances in an Auto Scaling group. The instances run behind an Application Load Balancer (ALB) that has a single target group. The ALB is configured as the origin in an Amazon CloudFront distribution. Users are reporting random logouts from the web application. <br \/>\r<br>Which combination of actions should a SysOps administrator take to resolve this problem? (Select TWO.)<\/div><input type='hidden' name='question_id[]' id='qID_40' value='403723' \/><input type='hidden' id='answerType403723' value='checkbox'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-403723[]' id='answer-id-1566568' class='answer   answerof-403723 ' value='1566568'   \/><label for='answer-id-1566568' id='answer-label-1566568' class=' answer'><span>Change to the least outstanding requests algorithm on the ALB target group.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-403723[]' id='answer-id-1566569' class='answer   answerof-403723 ' value='1566569'   \/><label for='answer-id-1566569' id='answer-label-1566569' class=' answer'><span>Configure cookie forwarding in the CloudFront distribution cache behavior.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-403723[]' id='answer-id-1566570' class='answer   answerof-403723 ' value='1566570'   \/><label for='answer-id-1566570' id='answer-label-1566570' class=' answer'><span>Configure header forwarding in the CloudFront distribution cache behavior.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-403723[]' id='answer-id-1566571' class='answer   answerof-403723 ' value='1566571'   \/><label for='answer-id-1566571' id='answer-label-1566571' class=' answer'><span>Enable group-level stickiness on the ALB listener rule.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-403723[]' id='answer-id-1566572' class='answer   answerof-403723 ' value='1566572'   \/><label for='answer-id-1566572' id='answer-label-1566572' class=' answer'><span>Enable sticky sessions on the ALB target group.<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div style='display:none' id='question-41'>\n\t<div class='question-content'>\n\t\t<img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/www.dumpsbase.com\/freedumps\/wp-content\/plugins\/watupro\/img\/loading.gif\" width=\"16\" height=\"16\" alt=\"Loading...\" title=\"Loading...\" \/>&nbsp;Loading...\t<\/div>\n<\/div>\n\n<br \/>\n\t\n\t\t\t<div class=\"watupro_buttons flex \" id=\"watuPROButtons10169\" >\n\t\t  <div id=\"prev-question\" style=\"display:none;\"><input type=\"button\" value=\"&lt; Previous\" onclick=\"WatuPRO.nextQuestion(event, 'previous');\"\/><\/div>\t\t  \t\t  \t\t   \n\t\t   \t  \t\t<div><input type=\"button\" name=\"action\" class=\"watupro-submit-button\" onclick=\"WatuPRO.submitResult(event)\" id=\"action-button\" value=\"View Results\"  \/>\n\t\t<\/div>\n\t\t<\/div>\n\t\t\n\t<input type=\"hidden\" name=\"quiz_id\" value=\"10169\" id=\"watuPROExamID\"\/>\n\t<input type=\"hidden\" name=\"start_time\" id=\"startTime\" value=\"2026-04-21 14:28:54\" \/>\n\t<input type=\"hidden\" name=\"start_timestamp\" id=\"startTimeStamp\" value=\"1776781734\" \/>\n\t<input type=\"hidden\" name=\"question_ids\" value=\"\" \/>\n\t<input type=\"hidden\" name=\"watupro_questions\" value=\"403684:1566400,1566401,1566402,1566403 | 403685:1566404,1566405,1566406,1566407 | 403686:1566408,1566409,1566410,1566411,1566412 | 403687:1566413,1566414,1566415,1566416,1566417 | 403688:1566418,1566419,1566420,1566421 | 403689:1566422,1566423,1566424,1566425,1566426 | 403690:1566427,1566428,1566429,1566430 | 403691:1566431,1566432,1566433,1566434,1566435,1566436,1566437 | 403692:1566438,1566439,1566440,1566441 | 403693:1566442,1566443,1566444,1566445 | 403694:1566446,1566447,1566448,1566449 | 403695:1566450,1566451,1566452,1566453 | 403696:1566454,1566455,1566456,1566457 | 403697:1566458,1566459,1566460,1566461 | 403698:1566462,1566463,1566464,1566465 | 403699:1566466,1566467,1566468,1566469 | 403700:1566470,1566471,1566472,1566473 | 403701:1566474,1566475,1566476,1566477 | 403702:1566478,1566479,1566480,1566481,1566482 | 403703:1566483,1566484,1566485,1566486 | 403704:1566487,1566488,1566489,1566490,1566491 | 403705:1566492,1566493,1566494,1566495,1566496 | 403706:1566497,1566498,1566499,1566500 | 403707:1566501,1566502,1566503,1566504 | 403708:1566505,1566506,1566507,1566508,1566509 | 403709:1566510,1637759,1637760,1637761 | 403710:1566511,1566512,1566513,1566514 | 403711:1566515,1566516,1566517,1566518 | 403712:1566519,1566520,1566521,1566522 | 403713:1566523,1566524,1566525,1566526 | 403714:1566527,1566528,1566529,1566530 | 403715:1566531,1566532,1566533,1566534 | 403716:1566535,1566536,1566537,1566538 | 403717:1566539,1566540,1566541,1566542,1566543,1566544,1566545,1566546 | 403718:1566547,1566548,1566549,1566550,1566551 | 403719:1566552,1566553,1566554,1566555 | 403720:1566556,1566557,1566558,1566559 | 403721:1566560,1566561,1566562,1566563 | 403722:1566564,1566565,1566566,1566567 | 403723:1566568,1566569,1566570,1566571,1566572\" \/>\n\t<input type=\"hidden\" name=\"no_ajax\" value=\"0\">\t\t\t<\/form>\n\t<p>&nbsp;<\/p>\n<\/div>\n\n<script type=\"text\/javascript\">\n\/\/jQuery(document).ready(function(){\ndocument.addEventListener(\"DOMContentLoaded\", function(event) { \t\nvar question_ids = \"403684,403685,403686,403687,403688,403689,403690,403691,403692,403693,403694,403695,403696,403697,403698,403699,403700,403701,403702,403703,403704,403705,403706,403707,403708,403709,403710,403711,403712,403713,403714,403715,403716,403717,403718,403719,403720,403721,403722,403723\";\nWatuPROSettings[10169] = {};\nWatuPRO.qArr = question_ids.split(',');\nWatuPRO.exam_id = 10169;\t    \nWatuPRO.post_id = 108780;\nWatuPRO.store_progress = 0;\nWatuPRO.curCatPage = 1;\nWatuPRO.requiredIDs=\"0\".split(\",\");\nWatuPRO.hAppID = \"0.31060200 1776781734\";\nvar url = \"https:\/\/www.dumpsbase.com\/freedumps\/wp-content\/plugins\/watupro\/show_exam.php\";\nWatuPRO.examMode = 1;\nWatuPRO.siteURL=\"https:\/\/www.dumpsbase.com\/freedumps\/wp-admin\/admin-ajax.php\";\nWatuPRO.emailIsNotRequired = 0;\nWatuPROIntel.init(10169);\nWatuPRO.inCategoryPages=1;});    \t \n<\/script>\n","protected":false},"excerpt":{"rendered":"<p>Whether you are entering the tech workforce or climbing the ladder, the AWS Certified SysOps Administrator &#8211; Associate certification will give you credibility and confidence. Furthermore, the SOA-C02 dumps (V15.02) from DumpsBase will help you pass the exam and earn the certification smoothly. The professional team of DumpsBase has collected the real exam questions to [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[175,15702],"tags":[18052,19559],"class_list":["post-108780","post","type-post","status-publish","format-standard","hentry","category-amazon","category-aws-certified-associate","tag-aws-certified-sysops-administrator-associate","tag-soa-c02-study-materials"],"_links":{"self":[{"href":"https:\/\/www.dumpsbase.com\/freedumps\/wp-json\/wp\/v2\/posts\/108780","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.dumpsbase.com\/freedumps\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.dumpsbase.com\/freedumps\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.dumpsbase.com\/freedumps\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.dumpsbase.com\/freedumps\/wp-json\/wp\/v2\/comments?post=108780"}],"version-history":[{"count":1,"href":"https:\/\/www.dumpsbase.com\/freedumps\/wp-json\/wp\/v2\/posts\/108780\/revisions"}],"predecessor-version":[{"id":108781,"href":"https:\/\/www.dumpsbase.com\/freedumps\/wp-json\/wp\/v2\/posts\/108780\/revisions\/108781"}],"wp:attachment":[{"href":"https:\/\/www.dumpsbase.com\/freedumps\/wp-json\/wp\/v2\/media?parent=108780"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.dumpsbase.com\/freedumps\/wp-json\/wp\/v2\/categories?post=108780"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.dumpsbase.com\/freedumps\/wp-json\/wp\/v2\/tags?post=108780"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}