- (Exam Topic 1)
A SysOps administrator must create a solution that immediately notifies software developers if an AWS Lambda function experiences an error.
Which solution will meet this requirement?

1. A. Create an Amazon Simple Notification Service (Amazon SNS) topic with an email subscription for each develope
2. B. Create an Amazon CloudWatch alarm by using the Errors metric and the Lambda function name as a dimensio
3. C. Configure the alarm to send a notification to the SNS topic when the alarm state reaches ALARM.
4. D. Create an Amazon Simple Notification Service (Amazon SNS) topic with a mobile subscription for each develope
5. E. Create an Amazon EventBridge (Amazon CloudWatch Events) alarm by using LambdaError as the event pattern and the SNS topic name as a resourc
6. F. Configure the alarm to send a notification to the SNS topic when the alarm state reaches ALARM.
7. G. Verify each developer email address in Amazon Simple Email Service (Amazon SES). Create an Amazon CloudWatch rule by using the LambdaError metric and developer email addresses as dimension
8. H. Configure the rule to send an email through Amazon SES when the rule state reaches ALARM.
9. I. Verify each developer mobile phone in Amazon Simple Email Service {Amazon SES). Create an Amazon EventBridge (Amazon CloudWatch Events) rule by using Errors as the event pattern and the Lambda function name as a resourc
10. J. Configure the rule to send a push notification through Amazon SES when the rule state reaches ALARM.

Correct Answer: A

- (Exam Topic 1)
A company wants to collect data from an application to use for analytics. For the first 90 days, the data will be infrequently accessed but must remain highly available. During this time, the company's analytics team requires access to the data in milliseconds. However, after 90 days, the company must retain the data for the long term at a lower cost. The retrieval time after 90 days must be less than 5 hours.
Which solution will meet these requirements MOST cost-effectively?

1. A. Store the data in S3 Standard-Infrequent Access (S3 Standard-IA) for the first 90 day
2. B. Set up an S3 Lifecycle rule to move the data to S3 Glacier Flexible Retrieval after 90 days.
3. C. Store the data in S3 One Zone-Infrequent Access (S3 One Zone-IA) for the first 90 day
4. D. Set up an S3 Lifecycle rule to move the data to S3 Glacier Deep Archive after 90 days.
5. E. Store the data in S3 Standard for the first 90 day
6. F. Set up an S3 Lifecycle rule to move the data to S3 Glacier Flexible Retrieval after 90 days.
7. G. Store the data in S3 Standard for the first 90 day
8. H. Set up an S3 Lifecycle rule to move the data to S3 Glacier Deep Archive after 90 days.

Correct Answer: A
Glacier Deep Archive retrieval time more than 5 hours (it's 12 hours), so B&D out. S3 Standard IA is cheaper than S3 Standard. https://aws.amazon.com/tw/s3/pricing/

- (Exam Topic 1)
A company has an internal web application that runs on Amazon EC2 instances behind an Application Load Balancer. The instances run in an Amazon EC2 Auto Scaling group in a single Availability Zone. A SysOps administrator must make the application highly available.
Which action should the SysOps administrator take to meet this requirement?

1. A. Increase the maximum number of instances in the Auto Scaling group to meet the capacity that is required at peak usage.
2. B. Increase the minimum number of instances in the Auto Scaling group to meet the capacity that is required at peak usage.
3. C. Update the Auto Scaling group to launch new instances in a second Availability Zone in the same AWS Region.
4. D. Update the Auto Scaling group to launch new instances in an Availability Zone in a second AWS Region.

Correct Answer: C
"An Auto Scaling group can contain EC2 instances in one or more Availability Zones within the same Region. However, Auto Scaling groups cannot span multiple Regions". As stated in https://docs.aws.amazon.com/autoscaling/ec2/userguide/auto-scaling-benefits.htm

- (Exam Topic 1)
A new application runs on Amazon EC2 instances and accesses data in an Amazon RDS database instance. When fully deployed in production, the application fails. The database can be queried from a console on a bastion host. When looking at the web server logs, the following error is repeated multiple times:
"** Error Establishing a Database Connection
Which of the following may be causes of the connectivity problems? {Select TWO.)

1. A. The security group for the database does not have the appropriate egress rule from the database to the web server.
2. B. The certificate used by the web server is not trusted by the RDS instance.
3. C. The security group for the database does not have the appropriate ingress rule from the web server to the database.
4. D. The port used by the application developer does not match the port specified in the RDS configuration.
5. E. The database is still being created and is not available for connectivity.

Correct Answer: CD

- (Exam Topic 1)
A company's SysOps administrator must ensure that all Amazon EC2 Windows instances that are launched in an AWS account have a third-party agent installed. The third-party agent has an msi package. The company uses AWS Systems Manager for patching, and the Windows instances are tagged appropriately. The third-party agent required periodic updates as new versions are released. The SysOps administrator must deploy these updates automatically
Which combination of steps will meet these requirements with the LEAST operational effort? (Seed TWO.) Create a Systems Manager Distributor package for the third-party agent.

1. A. Make sure that Systems Manager Inventory Is configure
2. B. If Systems Manager Inventory is not configured, set up a new inventory tor instances that is based on the appropriate tag value for Windows.
3. C. Create a Systems Manager State Manager association to run the AWS-RunRemoteScript document.Populate the details of the third-party agent packag
4. D. Specify instance tags based on the appropriate tag value for Windows with a schedule of 1 day
5. E. Create a Systems Manager State Manager- association to run the AWS-ConfigureAWSPackage documen
6. F. Populate the details of the third-party agent packag
7. G. Specify instance tags based on the appropriate tag value for Windows with a schedule of 1 day
8. H. Create a Systems Manager Opsitem with the tag value for Windows Attach the Systems Manager Distributor package to the Opsite
9. I. Create a maintenance window that is specific to the package deployment Configure the maintenance window to cover 24 hours a day.

Correct Answer: AD
https://docs.aws.amazon.com/systems-manager/latest/userguide/distributor-working-with-packages-deploy.html