A company maintains a list of 75 approved Amazon Machine Images (AMIs) that can be used across an organization in AWS Organizations. The company's development team has been launching Amazon EC2 instances from unapproved AMIs.
A SysOps administrator must prevent users from launching EC2 instances from unapproved AMIs.
Which solution will meet this requirement?

1. A. Add a tag to the approved AMI
2. B. Create an IAM policy that includes a tag condition that allows users to launch EC2 instances from only the tagged AMIs.
3. C. Create a service-linked rol
4. D. Attach a policy that denies the ability to launch EC2 instances from a list of unapproved AMI
5. E. Assign the role to users.
6. F. Use AWS Config with an AWS Lambda function to check for EC2 instances that are launched from unapproved AMI
7. G. Program the Lambda function to send an Amazon Simple Notification Service (Amazon SNS) message to the SysOps administrator to terminate those EC2 instances.
8. H. Use AWS Trusted Advisor to check for EC2 instances that are launched from unapproved AMI
9. I. Configure Trusted Advisor to invoke an AWS Lambda function to terminate those EC2 instances.

Correct Answer: A

An application runs on Amazon EC2 instances that are in an Auto Scaling group. A CloudOps engineer needs to implement a solution that provides a central storage location for errors that the application logs to disk. The solution must also provide an alert when the application logs an error.
What should the CloudOps engineer do to meet these requirements?

1. A. Deploy and configure the Amazon CloudWatch agent on the EC2 instances to log to a CloudWatch log grou
2. B. Create a metric filter on the target CloudWatch log grou
3. C. Create a CloudWatch alarm that publishes to an Amazon Simple Notification Service (Amazon SNS) topic that has an email subscription.
4. D. Create a cron job on the EC2 instances to identify errors and push the errors to an Amazon CloudWatch metric filte
5. E. Configure the filter to publish to an Amazon Simple Notification Service (Amazon SNS) topic that has an SMS subscription.
6. F. Deploy an AWS Lambda function that pushes the errors directly to Amazon CloudWatch Log
7. G. Configure the Lambda function to run every time the log file is updated on disk.
8. H. Create an Auto Scaling lifecycle hook that invokes an EC2-based script to identify error
9. I. Configure the script to push the error messages to an Amazon CloudWatch log group when the EC2 instances scale i
10. J. Create a CloudWatch alarm that publishes to an Amazon Simple Notification Service (Amazon SNS) topic that has an email subscription when the number of error messages exceeds a threshold.

Correct Answer: A

A CloudOps engineer needs to control access to groups of Amazon EC2 instances using AWS Systems Manager Session Manager. Specific tags on the EC2 instances have already been added.
Which additional actions should the CloudOps engineer take to control access? (Select TWO.)

1. A. Attach an IAM policy to the users or groups that require access to the EC2 instances.
2. B. Attach an IAM role to control access to the EC2 instances.
3. C. Create a placement group for the EC2 instances and add a specific tag.
4. D. Create a service account and attach it to the EC2 instances that need to be controlled.
5. E. Create an IAM policy that grants access to any EC2 instances with a tag specified in the Condition element.

Correct Answer: AE

A company uses multiple Amazon RDS databases to support an application. The application receives all its traffic during weekdays and is idle during weekends. The company wants a solution to automatically manage the RDS DB instances during idle periods to optimize costs.
Which solution will meet these requirements?

1. A. Use a cron job to automatically scale down the RDS DB instance type during weekends.
2. B. Configure Instance Scheduler on AWS to stop the RDS DB instances at the beginning of each weekend and to start the instances at the end of each weekend.
3. C. Purchase Reserved Instances for the RDS DB instances.
4. D. Use the auto scaling feature of Amazon RDS to automatically adjust the DB instance type based on CPU utilization.

Correct Answer: B

A CloudOps engineer needs to track the costs of data transfer between AWS Regions. The CloudOps engineer must implement a solution to send alerts to an email distribution list when transfer costs reach 75% of a specific threshold.
What should the CloudOps engineer do to meet these requirements?

1. A. Create an AWS Cost and Usage Repor
2. B. Analyze the results in Amazon Athen
3. C. Configure an alarm to publish a message to an Amazon Simple Notification Service (Amazon SNS) topic when costs reach 75% of the threshol
4. D. Subscribe the email distribution list to the topic.
5. E. Create an Amazon CloudWatch billing alarm to detect when costs reach 75% of the threshol
6. F. Configure the alarm to publish a message to an Amazon Simple Notification Service (Amazon SNS) topi
7. G. Subscribe the email distribution list to the topic.
8. H. Use AWS Budgets to create a cost budget for data transfer cost
9. I. Set an alert at 75% of the budgeted amoun
10. J. Configure the budget to send a notification to the email distribution list when costs reach 75% of the threshold.
11. K. Set up a VPC flow lo
12. L. Set up a subscription filter to an AWS Lambda function to analyze data transfe
13. M. Configure the Lambda function to send a notification to the email distribution list when costs reach 75% of the threshold.

Correct Answer: C