A company's website runs on an Amazon EC2 Linux instance. The website needs to serve PDF files from an Amazon S3 bucket. All public access to the S3 bucket is blocked at the account level. The company needs to allow website users to download the PDF files.
Which solution will meet these requirements with the LEAST administrative effort?

1. A. Create an IAM role that has a policy that allows s3:list* and s3:get* permission
2. B. Assign the role to the EC2 instanc
3. C. Assign a company employee to download requested PDF files to the EC2 instance and deliver the files to website user
4. D. Create an AWS Lambda function to periodically delete local files.
5. E. Create an Amazon CloudFront distribution that uses an origin access control (OAC) that points to the S3 bucke
6. F. Apply a bucket policy to the bucket to allow connections from the CloudFront distributio
7. G. Assign a company employee to provide a download URL that contains the distribution URL and the object path to users when users request PDF files.
8. H. Change the S3 bucket permissions to allow public access on the source S3 bucke
9. I. Assign a company employee to provide a PDF file URL to users when users request the PDF files.
10. J. Deploy an EC2 instance that has an IAM instance profile to a public subne
11. K. Use a signed URL from the EC2 instance to provide temporary access to the S3 bucket for website users.

Correct Answer: B

A company needs to monitor its website's availability to end users. The company needs a solution to provide an Amazon Simple Notification Service (Amazon SNS) notification if the website's uptime decreases to less than 99%. The monitoring must provide an accurate view of the user experience on the website.
Which solution will meet these requirements?

1. A. Create an Amazon CloudWatch alarm that is based on the website??s logs that are published to a CloudWatch Logs log grou
2. B. Configure the alarm to publish an SNS notification if the number of HTTP 4xx and 5xx errors exceeds a specified threshold.
3. C. Create an Amazon CloudWatch alarm that is based on the website's published metrics in CloudWatc
4. D. Configure the alarm to publish an SNS notification based on anomaly detection.
5. E. Create an Amazon CloudWatch Synthetics heartbeat monitoring canar
6. F. Associate the canary with the website??s UR
7. G. Create a CloudWatch alarm for the canar
8. H. Configure the alarm to publish an SNS notification if the value of the SuccessPercent metric is less than 99%.
9. I. Create an Amazon CloudWatch Synthetics broken link checker monitoring canar
10. J. Associate the canary with the website??s UR
11. K. Create a CloudWatch alarm for the canar
12. L. Configure the alarm to publish an SNS notification if the value of the SuccessPercent metric is less than 99%.

Correct Answer: C

A company hosts an FTP server on EC2 instances. AWS Security Hub sends findings to Amazon EventBridge when the FTP port becomes publicly exposed in attached security groups.
A CloudOps engineer needs an automated, event-driven remediation solution to remove public access from security groups.
Which solution will meet these requirements?

1. A. Configure the existing EventBridge event to stop the EC2 instances that have the exposed port.
2. B. Create a cron job for the FTP server to invoke an AWS Lambda functio
3. C. Configure the Lambda function to modify the security group of the identified EC2 instances and to remove the instances that allow public access.
4. D. Create a cron job for the FTP server that invokes an AWS Lambda functio
5. E. Configure the Lambda function to modify the server to use SFTP instead of FTP.
6. F. Configure the existing EventBridge event to invoke an AWS Lambda functio
7. G. Configure the function to remove the security group rule that allows public access.

Correct Answer: D

A company runs a website on Amazon EC2 instances. Users can upload images to an Amazon S3 bucket and publish the images to the website. The company wants to deploy a serverless image-processing application that uses an AWS Lambda function to resize the uploaded images.
The company's development team has created the Lambda function. A CloudOps engineer must implement a solution to invoke the Lambda function when users upload new images to the S3 bucket.
Which solution will meet this requirement?

1. A. Configure an Amazon Simple Notification Service (Amazon SNS) topic to invoke the Lambda function when a user uploads a new image to the S3 bucket.
2. B. Configure an Amazon CloudWatch alarm to invoke the Lambda function when a user uploads a new image to the S3 bucket.
3. C. Configure S3 Event Notifications to invoke the Lambda function when a user uploads anew image to the S3 bucket.
4. D. Configure an Amazon Simple Queue Service (Amazon SQS) queue to invoke the Lambda function when a user uploads a new image to the S3 bucket.

Correct Answer: C

A company runs an application on Amazon EC2 that connects to an Amazon Aurora PostgreSQL database. A developer accidentally drops a table from the database, causing application errors. Two hours later, a CloudOps engineer needs to recover the data and make the application functional again.
Which solution will meet this requirement?

1. A. Use the Aurora Backtrack feature to rewind the database to a specified time, 2 hours in the past.
2. B. Perform a point-in-time recovery on the existing database to restore the database to a specified point in time, 2 hours in the past.
3. C. Perform a point-in-time recovery and create a new database to restore the database to a specified point in time, 2 hours in the pas
4. D. Reconfigure the application to use a new database endpoint.
5. E. Create a new Aurora cluste
6. F. Choose the Restore data from S3 bucket optio
7. G. Choose log files up to the failure time 2 hours in the past.

Correct Answer: C